Edit tour

Windows Analysis Report
jAjWw92QKR.exe

Overview

General Information

Sample name:	jAjWw92QKR.exe renamed because original name is a hash value
Original sample name:	24c5c45311482c0f967bd93942fcfa01.exe
Analysis ID:	1534485
MD5:	24c5c45311482c0f967bd93942fcfa01
SHA1:	446849e49154540e4395fc9eaaf96249deb05a3d
SHA256:	7937b40b93a7e937d0eb5d31b50e6d5e3782b7418d8e67848f13c807cd0eda31
Tags:	AsyncRATexeRATuser-abuse_ch
Infos:

Detection

AsyncRAT, PureLog Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected AsyncRAT

Yara detected PureLog Stealer

.NET source code contains method to dynamically call methods (often used by packers)

AI detected suspicious sample

Machine Learning detection for sample

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Yara detected Generic Downloader

Allocates memory with a write watch (potentially for evading sandboxes)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains long sleeps (>= 3 min)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Stores large binary data to the registry

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara signature match

Classification

Process Tree

System is w10x64

jAjWw92QKR.exe (PID: 6896 cmdline: "C:\Users\user\Desktop\jAjWw92QKR.exe" MD5: 24C5C45311482C0F967BD93942FCFA01)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
AsyncRAT	AsyncRAT is a Remote Access Tool (RAT) designed to remotely monitor and control other computers through a secure encrypted connection. It is an open source remote administration tool, however, it could also be used maliciously because it provides functionality such as keylogger, remote desktop control, and many other functions that may cause harm to the victims computer. In addition, AsyncRAT can be delivered via various methods such as spear-phishing, malvertising, exploit kit and other techniques.	No Attribution	https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/asyncrat-onenote-dropper https://aidenmitchell.ca/asyncrat-via-vbs/ https://assets.virustotal.com/reports/2021trends.pdf https://axmahr.github.io/posts/asyncrat-detection/ https://blog.checkpoint.com/research/november-2023s-most-wanted-malware-new-asyncrat-campaign-discovered-while-fakeupdates-re-entered-the-top-ten-after-brief-hiatus/	https://malpedia.caad.fkie.fraunhofer.de/details/win.asyncrat

Malware Configuration

Threatname: AsyncRAT

{"External_config_on_Pastebin": "null", "Server": "46.253.4.252", "Ports": "6606", "Version": "0.5.8", "Autorun": "false", "Install_Folder": "Bonjur.exe", "Install_File": "MU1PRnh3MndPTmFCVUIxWlZXNlZ5YnRmRWNMWEtjMVc="}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
jAjWw92QKR.exe	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
jAjWw92QKR.exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
jAjWw92QKR.exe	Windows_Trojan_Asyncrat_11a11ba1	unknown	unknown	0xa265:$a1: /c schtasks /create /f /sc onlogon /rl highest /tn " 0xb638:$a2: Stub.exe 0xb6c8:$a2: Stub.exe 0x6fb8:$a3: get_ActivatePong 0xa47d:$a4: vmware 0xa2f5:$a5: \nuR\noisreVtnerruC\swodniW\tfosorciM\erawtfoS 0x7c71:$a6: get_SslClient
jAjWw92QKR.exe	INDICATOR_SUSPICIOUS_EXE_ASEP_REG_Reverse	Detects file containing reversed ASEP Autorun registry keys	ditekSHen	0xa2f7:$s1: nuR\noisreVtnerruC\swodniW\tfosorciM

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x324:$x1: AsyncRAT 0x362:$x1: AsyncRAT

Memory Dumps

Source	Rule	Description	Author	Strings
00000000.00000002.2955367887.0000000005075000.00000004.00000020.00020000.00000000.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x2bdef:$x1: AsyncRAT 0x2be2d:$x1: AsyncRAT
00000000.00000000.1701128846.0000000000712000.00000002.00000001.01000000.00000003.sdmp	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
00000000.00000000.1701128846.0000000000712000.00000002.00000001.01000000.00000003.sdmp	INDICATOR_SUSPICIOUS_EXE_ASEP_REG_Reverse	Detects file containing reversed ASEP Autorun registry keys	ditekSHen	0xa0f7:$s1: nuR\noisreVtnerruC\swodniW\tfosorciM
00000000.00000002.2957735676.0000000006BD0000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000000.00000002.2945450344.0000000000E1A000.00000004.00000020.00020000.00000000.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x12caf:$x1: AsyncRAT 0x12ced:$x1: AsyncRAT
00000000.00000002.2945450344.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x3715b:$x1: AsyncRAT 0x37199:$x1: AsyncRAT
00000000.00000002.2946371088.0000000002ABA000.00000004.00000800.00020000.00000000.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x6e68b:$x1: AsyncRAT 0x6e6c9:$x1: AsyncRAT
00000000.00000002.2954308452.0000000003A87000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000000.00000002.2946371088.0000000002A81000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
00000000.00000002.2946371088.0000000002A81000.00000004.00000800.00020000.00000000.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x2b46f:$x1: AsyncRAT 0x2b4ad:$x1: AsyncRAT
Process Memory Space: jAjWw92QKR.exe PID: 6896	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
Process Memory Space: jAjWw92QKR.exe PID: 6896	INDICATOR_SUSPICIOUS_EXE_ASEP_REG_Reverse	Detects file containing reversed ASEP Autorun registry keys	ditekSHen	0x57a53:$s1: nuR\noisreVtnerruC\swodniW\tfosorciM
Process Memory Space: jAjWw92QKR.exe PID: 6896	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x50e2:$x1: AsyncRAT 0x5114:$x1: AsyncRAT 0x3aa5e:$x1: AsyncRAT 0x3aa90:$x1: AsyncRAT 0x482c2:$x1: AsyncRAT 0x482f4:$x1: AsyncRAT 0x4831a:$x1: AsyncRAT 0x5e155:$x1: AsyncRAT 0x5e187:$x1: AsyncRAT 0x6db8a:$x1: AsyncRAT 0x6dbbc:$x1: AsyncRAT 0x57b19:$s6: VirtualBox 0x57acc:$s8: Win32_ComputerSystem
Click to see the 8 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.0.jAjWw92QKR.exe.710000.0.unpack	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
0.0.jAjWw92QKR.exe.710000.0.unpack	Windows_Trojan_Asyncrat_11a11ba1	unknown	unknown	0xa265:$a1: /c schtasks /create /f /sc onlogon /rl highest /tn " 0xb638:$a2: Stub.exe 0xb6c8:$a2: Stub.exe 0x6fb8:$a3: get_ActivatePong 0xa47d:$a4: vmware 0xa2f5:$a5: \nuR\noisreVtnerruC\swodniW\tfosorciM\erawtfoS 0x7c71:$a6: get_SslClient
0.0.jAjWw92QKR.exe.710000.0.unpack	INDICATOR_SUSPICIOUS_EXE_ASEP_REG_Reverse	Detects file containing reversed ASEP Autorun registry keys	ditekSHen	0xa2f7:$s1: nuR\noisreVtnerruC\swodniW\tfosorciM
0.2.jAjWw92QKR.exe.3b5b878.0.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.jAjWw92QKR.exe.6bd0000.1.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.jAjWw92QKR.exe.6bd0000.1.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.jAjWw92QKR.exe.3b5b878.0.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
Click to see the 2 entries

Suricata Signatures

ET MALWARE Generic AsyncRAT Style SSL Cert

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-15T23:12:06.173668+0200	2035595	1	Domain Observed Used for C2 Detected	46.253.4.252	6606	192.168.2.4	49730	TCP

ET MALWARE Observed Malicious SSL Cert (AsyncRAT Server)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-15T23:12:06.173668+0200	2035607	1	Domain Observed Used for C2 Detected	46.253.4.252	6606	192.168.2.4	49730	TCP

ETPRO JA3 Hash - Suspected ASYNCRAT Server Cert (ja3s)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-15T23:12:06.173668+0200	2842478	1	Malware Command and Control Activity Detected	46.253.4.252	6606	192.168.2.4	49730	TCP
2024-10-15T23:13:09.283864+0200	2842478	1	Malware Command and Control Activity Detected	46.253.4.252	6606	192.168.2.4	49798	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: jAjWw92QKR.exe

Avira: detected

Found malware configuration

Source: jAjWw92QKR.exe

Malware Configuration Extractor: AsyncRAT {"External_config_on_Pastebin": "null", "Server": "46.253.4.252", "Ports": "6606", "Version": "0.5.8", "Autorun": "false", "Install_Folder": "Bonjur.exe", "Install_File": "MU1PRnh3MndPTmFCVUIxWlZXNlZ5YnRmRWNMWEtjMVc="}

Multi AV Scanner detection for submitted file

Source: jAjWw92QKR.exe

ReversingLabs: Detection: 89%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: jAjWw92QKR.exe

Joe Sandbox ML: detected

Source: jAjWw92QKR.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: jAjWw92QKR.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2842478 - Severity 1 - ETPRO JA3 Hash - Suspected ASYNCRAT Server Cert (ja3s) : 46.253.4.252:6606 -> 192.168.2.4:49730
Source: Network traffic	Suricata IDS: 2030673 - Severity 1 - ET MALWARE Observed Malicious SSL Cert (AsyncRAT Server) : 46.253.4.252:6606 -> 192.168.2.4:49730
Source: Network traffic	Suricata IDS: 2035595 - Severity 1 - ET MALWARE Generic AsyncRAT Style SSL Cert : 46.253.4.252:6606 -> 192.168.2.4:49730
Source: Network traffic	Suricata IDS: 2035607 - Severity 1 - ET MALWARE Observed Malicious SSL Cert (AsyncRAT Server) : 46.253.4.252:6606 -> 192.168.2.4:49730
Source: Network traffic	Suricata IDS: 2842478 - Severity 1 - ETPRO JA3 Hash - Suspected ASYNCRAT Server Cert (ja3s) : 46.253.4.252:6606 -> 192.168.2.4:49798

Yara detected Generic Downloader

Source: Yara match

File source: jAjWw92QKR.exe, type: SAMPLE

Source: global traffic

TCP traffic: 192.168.2.4:49730 -> 46.253.4.252:6606

Source: Joe Sandbox View

ASN Name: BTEL-BG-ASBG BTEL-BG-ASBG

Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252
Source: unknown	TCP traffic detected without corresponding DNS query: 46.253.4.252

Source: jAjWw92QKR.exe, 00000000.00000002.2945450344.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en
Source: jAjWw92QKR.exe, 00000000.00000002.2945450344.0000000000E1A000.00000004.00000020.00020000.00000000.sdmp, 77EC63BDA74BD0D0E0426DC8F80085060.0.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: jAjWw92QKR.exe, 00000000.00000002.2946371088.0000000002A81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name

Key, Mouse, Clipboard, Microphone and Screen Capturing

Yara detected AsyncRAT

Source: Yara match	File source: jAjWw92QKR.exe, type: SAMPLE
Source: Yara match	File source: 0.0.jAjWw92QKR.exe.710000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1701128846.0000000000712000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2946371088.0000000002A81000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: jAjWw92QKR.exe PID: 6896, type: MEMORYSTR

System Summary

Malicious sample detected (through community Yara rule)

Source: jAjWw92QKR.exe, type: SAMPLE	Matched rule: Windows_Trojan_Asyncrat_11a11ba1 Author: unknown
Source: jAjWw92QKR.exe, type: SAMPLE	Matched rule: Detects file containing reversed ASEP Autorun registry keys Author: ditekSHen
Source: dump.pcap, type: PCAP	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 0.0.jAjWw92QKR.exe.710000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Asyncrat_11a11ba1 Author: unknown
Source: 0.0.jAjWw92QKR.exe.710000.0.unpack, type: UNPACKEDPE	Matched rule: Detects file containing reversed ASEP Autorun registry keys Author: ditekSHen
Source: 00000000.00000002.2955367887.0000000005075000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000000.00000000.1701128846.0000000000712000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Detects file containing reversed ASEP Autorun registry keys Author: ditekSHen
Source: 00000000.00000002.2945450344.0000000000E1A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000000.00000002.2945450344.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000000.00000002.2946371088.0000000002ABA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000000.00000002.2946371088.0000000002A81000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: Process Memory Space: jAjWw92QKR.exe PID: 6896, type: MEMORYSTR	Matched rule: Detects file containing reversed ASEP Autorun registry keys Author: ditekSHen
Source: Process Memory Space: jAjWw92QKR.exe PID: 6896, type: MEMORYSTR	Matched rule: Detects AsyncRAT Author: ditekSHen

Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_00C11F22	0_2_00C11F22
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_00C11F30	0_2_00C11F30
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_00F19BD0	0_2_00F19BD0
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_00F1A330	0_2_00F1A330
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_00F17478	0_2_00F17478
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_00F15C00	0_2_00F15C00
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_00F140E0	0_2_00F140E0
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_00F1B050	0_2_00F1B050
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_00F12AA8	0_2_00F12AA8
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_00F14BF8	0_2_00F14BF8
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_028AC118	0_2_028AC118
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_028AC478	0_2_028AC478
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_028A65C0	0_2_028A65C0
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_028A5CF0	0_2_028A5CF0
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_028AC3A0	0_2_028AC3A0
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_028AC108	0_2_028AC108
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_028AC468	0_2_028AC468
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_028AA878	0_2_028AA878
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_028A59A8	0_2_028A59A8
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_0712E0C0	0_2_0712E0C0

Source: jAjWw92QKR.exe, 00000000.00000002.2957735676.0000000006BD0000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenameRemoteDesktop.dll" vs jAjWw92QKR.exe
Source: jAjWw92QKR.exe, 00000000.00000000.1701128846.000000000071E000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameStub.exe" vs jAjWw92QKR.exe
Source: jAjWw92QKR.exe, 00000000.00000002.2954308452.0000000003A87000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameRemoteDesktop.dll" vs jAjWw92QKR.exe
Source: jAjWw92QKR.exe	Binary or memory string: OriginalFilenameStub.exe" vs jAjWw92QKR.exe

Source: jAjWw92QKR.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: jAjWw92QKR.exe, type: SAMPLE	Matched rule: Windows_Trojan_Asyncrat_11a11ba1 reference_sample = fe09cd1d13b87c5e970d3cbc1ebc02b1523c0a939f961fc02c1395707af1c6d1, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Asyncrat, fingerprint = 715ede969076cd413cebdfcf0cdda44e3a6feb5343558f18e656f740883b41b8, id = 11a11ba1-c178-4415-9c09-45030b500f50, last_modified = 2021-10-04
Source: jAjWw92QKR.exe, type: SAMPLE	Matched rule: INDICATOR_SUSPICIOUS_EXE_ASEP_REG_Reverse author = ditekSHen, description = Detects file containing reversed ASEP Autorun registry keys
Source: dump.pcap, type: PCAP	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 0.0.jAjWw92QKR.exe.710000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Asyncrat_11a11ba1 reference_sample = fe09cd1d13b87c5e970d3cbc1ebc02b1523c0a939f961fc02c1395707af1c6d1, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Asyncrat, fingerprint = 715ede969076cd413cebdfcf0cdda44e3a6feb5343558f18e656f740883b41b8, id = 11a11ba1-c178-4415-9c09-45030b500f50, last_modified = 2021-10-04
Source: 0.0.jAjWw92QKR.exe.710000.0.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_ASEP_REG_Reverse author = ditekSHen, description = Detects file containing reversed ASEP Autorun registry keys
Source: 00000000.00000002.2955367887.0000000005075000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000000.00000000.1701128846.0000000000712000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: INDICATOR_SUSPICIOUS_EXE_ASEP_REG_Reverse author = ditekSHen, description = Detects file containing reversed ASEP Autorun registry keys
Source: 00000000.00000002.2945450344.0000000000E1A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000000.00000002.2945450344.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000000.00000002.2946371088.0000000002ABA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000000.00000002.2946371088.0000000002A81000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: Process Memory Space: jAjWw92QKR.exe PID: 6896, type: MEMORYSTR	Matched rule: INDICATOR_SUSPICIOUS_EXE_ASEP_REG_Reverse author = ditekSHen, description = Detects file containing reversed ASEP Autorun registry keys
Source: Process Memory Space: jAjWw92QKR.exe PID: 6896, type: MEMORYSTR	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT

Source: 0.2.jAjWw92QKR.exe.3b5b878.0.raw.unpack, ziMWyOoZyUZMaIOvjHCE.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.jAjWw92QKR.exe.3b5b878.0.raw.unpack, ziMWyOoZyUZMaIOvjHCE.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.jAjWw92QKR.exe.6bd0000.1.raw.unpack, ziMWyOoZyUZMaIOvjHCE.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.jAjWw92QKR.exe.6bd0000.1.raw.unpack, ziMWyOoZyUZMaIOvjHCE.cs	Cryptographic APIs: 'CreateDecryptor'

Source: jAjWw92QKR.exe, jvKrNltjfdZhx.cs

Base64 encoded string: 'N0m+ZaMBZTUenc75zBMytMyWUEX5xZFcLgv8BKStcSqMASe4HikiA4pQwoMtLhdcXtxYITweK/n40Dv78IPPFQ==', 'TNc0PODsgmsnpD44FSK0DhcF0MMu/wZXBGbtxELpsERsWjpHgf4Co0/oFjS6aococ5A8mp7OTDo9I56O2z+7Fg==', 'VK271aMTschO6lEG/lykXW433Und6Uw4LvsjzVWZi0cKIyY3Cak4Zu1Jc6kAQ9SwCNVI1E9MzGwf6qjdAC6H0g==', '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', 'ZlsFK8N6jUvspi3zIrOEelm63eYc4GuXoqcExYCPZb2aIE9fUyy7xgx/oGj3TXb8lYXvKPxCgsWz13o0QnJ8Hg==', 'HGMyqpRjKxlxmGqQdJixbqsoNkxcLqkCEZNUxnRxcj9hxHr6F7cAX8ZG34vihF1zHqexQknLGNOlRTT1J54Y4g==', 'l1mud016zMEBApoxXSITRoK4M8i2Nw4JcMuseZxj74lNuENtbOVZYCK1hGiNZH+5QRmPFafUXr++gMPq3ndBkA=='

Source: classification engine

Classification label: mal100.troj.evad.winEXE@1/2@0/1

Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Mutant created: NULL
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Mutant created: \Sessions\1\BaseNamedObjects\ThjwDsAUzg18

Source: jAjWw92QKR.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: jAjWw92QKR.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.83%

Source: C:\Users\user\Desktop\jAjWw92QKR.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: jAjWw92QKR.exe

ReversingLabs: Detection: 89%

Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: cryptnet.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Section loaded: windowscodecs.dll	Jump to behavior

Source: C:\Users\user\Desktop\jAjWw92QKR.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32

Jump to behavior

Source: jAjWw92QKR.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: jAjWw92QKR.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Data Obfuscation

.NET source code contains method to dynamically call methods (often used by packers)

Source: 0.2.jAjWw92QKR.exe.3b5b878.0.raw.unpack, ziMWyOoZyUZMaIOvjHCE.cs	.Net Code: typeof(Marshal).GetMethod("GetDelegateForFunctionPointer", new Type[2]{typeof(IntPtr),typeof(Type)})
Source: 0.2.jAjWw92QKR.exe.6bd0000.1.raw.unpack, ziMWyOoZyUZMaIOvjHCE.cs	.Net Code: typeof(Marshal).GetMethod("GetDelegateForFunctionPointer", new Type[2]{typeof(IntPtr),typeof(Type)})

Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_00F18530 pushad ; iretd	0_2_00F18531
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_06D2EC6B pushfd ; iretd	0_2_06D2EC71
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_06D2EBD3 push eax; iretd	0_2_06D2EBD9
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_06D2EBD0 pushad ; iretd	0_2_06D2EBD1
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_06D2EBE0 pushfd ; iretd	0_2_06D2EC71
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_071106C6 push esp; retf 0000h	0_2_071106C7
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Code function: 0_2_071134C4 push esp; ret	0_2_071134C5

Source: jAjWw92QKR.exe, DyJxOtLODafJsj.cs	High entropy of concatenated method names: 'pejgcWhxbm', 'FJnIVsXxEqsJUD', 'jnLWOlIZuSI', 'zgISzcqOWkDxuRP', 'KkrnIbMVOzyeJwr', 'jRpWeBURYM', 'sgQQFkWReLe', 'ZCDODDjvIqoM', 'qRiNNFMvjdmlZ', 'GGKgiHeMqeCVWbv'
Source: 0.2.jAjWw92QKR.exe.3b5b878.0.raw.unpack, KDUMiYoIoTsq2lJeGwnE.cs	High entropy of concatenated method names: 'fMFoImNqoVy', 'puEoIKuDBqi', 'olFoIwpAhxi', 'nbtoIxVPv3N', 'AjToI0KM4SJ', 'Xr1oIHNFbKe', 'K6moI3a5Zj6', 'YpVoIDLUq67', 'Oy7oIi3cwX3', 'JHcoIr21WFV'
Source: 0.2.jAjWw92QKR.exe.3b5b878.0.raw.unpack, Connection.cs	High entropy of concatenated method names: 'HNqXzO7iH6G', 'VkQfSRoiSYiJuYsQYExW', 'fVhM4koi4ImYVs4343uW', 'rF9XRDx1PZa', 'CKNXRiDpYgE', 'tWrXRQecZMi', 'pAlXRTEaDm9', 'PCJXR4msDPJ', 'lSwXRdDILTt', 'FsmXR1ebt6a'
Source: 0.2.jAjWw92QKR.exe.3b5b878.0.raw.unpack, Packet.cs	High entropy of concatenated method names: 'p12oZg4V6ZZ', 'Yp8n3RoiNeOyCximvn5w', 'kR3g3coiC2CVoBymiO2Y', 'Read', 'CaptureAndSend', 'DKbXRadb9wF', 'J74XR9CNU4O', 'DmkXRVZLhAs', 'pbSXROPyaJf', 'cBWXR5af888'
Source: 0.2.jAjWw92QKR.exe.3b5b878.0.raw.unpack, ziMWyOoZyUZMaIOvjHCE.cs	High entropy of concatenated method names: 'wUlBYKoiBMnj2vLa5VA5', 'uQmT7LoiJdKDvyr2MWHl', 'FPVWbcoiqnysEesSE1b9', 'Ruko2ssKGFI', 'B9MebAorZrfyEayee6n4', 'DmrFgRor2NpNFLPjYwZ4', 'Ce9k75orIKmoU6wsIeDw', 'fCM3XGorgqGSKEIUadOH', 'olWwJUorX5WoNxUTsmjW', 'R5I1m4oro7P6GaW3Dx1M'
Source: 0.2.jAjWw92QKR.exe.3b5b878.0.raw.unpack, X3KhNdoIQ61kxbCxoEUJ.cs	High entropy of concatenated method names: 'CPeobL7QBEb', 'jn9obveqW5J', 'I8wobqKkB9x', 'ALLobhotMDb', 'x5BobBu7cDF', 'SwwobJ33dZL', 'ix9obcP1Z2M', 'tNwoILdmogW', 'goeobRAQvp1', 'nnfobz4Y3Js'
Source: 0.2.jAjWw92QKR.exe.6bd0000.1.raw.unpack, KDUMiYoIoTsq2lJeGwnE.cs	High entropy of concatenated method names: 'fMFoImNqoVy', 'puEoIKuDBqi', 'olFoIwpAhxi', 'nbtoIxVPv3N', 'AjToI0KM4SJ', 'Xr1oIHNFbKe', 'K6moI3a5Zj6', 'YpVoIDLUq67', 'Oy7oIi3cwX3', 'JHcoIr21WFV'
Source: 0.2.jAjWw92QKR.exe.6bd0000.1.raw.unpack, Connection.cs	High entropy of concatenated method names: 'HNqXzO7iH6G', 'VkQfSRoiSYiJuYsQYExW', 'fVhM4koi4ImYVs4343uW', 'rF9XRDx1PZa', 'CKNXRiDpYgE', 'tWrXRQecZMi', 'pAlXRTEaDm9', 'PCJXR4msDPJ', 'lSwXRdDILTt', 'FsmXR1ebt6a'
Source: 0.2.jAjWw92QKR.exe.6bd0000.1.raw.unpack, Packet.cs	High entropy of concatenated method names: 'p12oZg4V6ZZ', 'Yp8n3RoiNeOyCximvn5w', 'kR3g3coiC2CVoBymiO2Y', 'Read', 'CaptureAndSend', 'DKbXRadb9wF', 'J74XR9CNU4O', 'DmkXRVZLhAs', 'pbSXROPyaJf', 'cBWXR5af888'
Source: 0.2.jAjWw92QKR.exe.6bd0000.1.raw.unpack, ziMWyOoZyUZMaIOvjHCE.cs	High entropy of concatenated method names: 'wUlBYKoiBMnj2vLa5VA5', 'uQmT7LoiJdKDvyr2MWHl', 'FPVWbcoiqnysEesSE1b9', 'Ruko2ssKGFI', 'B9MebAorZrfyEayee6n4', 'DmrFgRor2NpNFLPjYwZ4', 'Ce9k75orIKmoU6wsIeDw', 'fCM3XGorgqGSKEIUadOH', 'olWwJUorX5WoNxUTsmjW', 'R5I1m4oro7P6GaW3Dx1M'
Source: 0.2.jAjWw92QKR.exe.6bd0000.1.raw.unpack, X3KhNdoIQ61kxbCxoEUJ.cs	High entropy of concatenated method names: 'CPeobL7QBEb', 'jn9obveqW5J', 'I8wobqKkB9x', 'ALLobhotMDb', 'x5BobBu7cDF', 'SwwobJ33dZL', 'ix9obcP1Z2M', 'tNwoILdmogW', 'goeobRAQvp1', 'nnfobz4Y3Js'

Boot Survival

Yara detected AsyncRAT

Source: Yara match	File source: jAjWw92QKR.exe, type: SAMPLE
Source: Yara match	File source: 0.0.jAjWw92QKR.exe.710000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1701128846.0000000000712000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2946371088.0000000002A81000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: jAjWw92QKR.exe PID: 6896, type: MEMORYSTR

Source: C:\Users\user\Desktop\jAjWw92QKR.exe

Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot

Jump to behavior

Source: C:\Users\user\Desktop\jAjWw92QKR.exe

Key value created or modified: HKEY_CURRENT_USER\SOFTWARE\6A2FDB79F5F5212CA21E 56FD699258A7186F709068C283CD725797BAB392E3A6F1CD28F35BBDB3E98E38

Jump to behavior

Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Yara detected AsyncRAT

Source: Yara match	File source: jAjWw92QKR.exe, type: SAMPLE
Source: Yara match	File source: 0.0.jAjWw92QKR.exe.710000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1701128846.0000000000712000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2946371088.0000000002A81000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: jAjWw92QKR.exe PID: 6896, type: MEMORYSTR

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: jAjWw92QKR.exe

Binary or memory string: SBIEDLL.DLL

Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Memory allocated: 2860000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Memory allocated: 2A80000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Memory allocated: 4A80000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\jAjWw92QKR.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Window / User API: threadDelayed 5311			Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Window / User API: threadDelayed 4517			Jump to behavior

Source: C:\Users\user\Desktop\jAjWw92QKR.exe TID: 6096	Thread sleep time: -30000s >= -30000s			Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe TID: 2816	Thread sleep time: -31359464925306218s >= -30000s			Jump to behavior

Source: C:\Users\user\Desktop\jAjWw92QKR.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\jAjWw92QKR.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: jAjWw92QKR.exe	Binary or memory string: vmware
Source: jAjWw92QKR.exe, 00000000.00000002.2945679195.0000000000E93000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: jAjWw92QKR.exe, 00000000.00000002.2945450344.0000000000E1A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWh
Source: jAjWw92QKR.exe, 00000000.00000002.2945679195.0000000000E61000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWc(

Source: C:\Users\user\Desktop\jAjWw92QKR.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\jAjWw92QKR.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: jAjWw92QKR.exe, 00000000.00000002.2946371088.0000000002E69000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager@\^q
Source: jAjWw92QKR.exe, 00000000.00000002.2946371088.0000000002E69000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager
Source: jAjWw92QKR.exe, 00000000.00000002.2946371088.0000000002E69000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager@\^q%
Source: jAjWw92QKR.exe, 00000000.00000002.2946371088.0000000002E69000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program ManagerTe^q

Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Queries volume information: C:\Users\user\Desktop\jAjWw92QKR.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\jAjWw92QKR.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\jAjWw92QKR.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Yara detected AsyncRAT

Source: Yara match	File source: jAjWw92QKR.exe, type: SAMPLE
Source: Yara match	File source: 0.0.jAjWw92QKR.exe.710000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1701128846.0000000000712000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2946371088.0000000002A81000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: jAjWw92QKR.exe PID: 6896, type: MEMORYSTR

Source: C:\Users\user\Desktop\jAjWw92QKR.exe

WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct

Stealing of Sensitive Information

Yara detected PureLog Stealer

Source: Yara match	File source: 0.2.jAjWw92QKR.exe.3b5b878.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.jAjWw92QKR.exe.6bd0000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.jAjWw92QKR.exe.6bd0000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.jAjWw92QKR.exe.3b5b878.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2957735676.0000000006BD0000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2954308452.0000000003A87000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY

Remote Access Functionality

Yara detected PureLog Stealer

Source: Yara match	File source: 0.2.jAjWw92QKR.exe.3b5b878.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.jAjWw92QKR.exe.6bd0000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.jAjWw92QKR.exe.6bd0000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.jAjWw92QKR.exe.3b5b878.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2957735676.0000000006BD0000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2954308452.0000000003A87000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Windows Management Instrumentation	1 Scheduled Task/Job	1 Process Injection	1 Modify Registry	OS Credential Dumping	1 Query Registry	Remote Services	11 Archive Collected Data	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Scheduled Task/Job	1 DLL Side-Loading	1 Scheduled Task/Job	1 Disable or Modify Tools	LSASS Memory	111 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	31 Virtualization/Sandbox Evasion	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Steganography	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Process Injection	NTDS	31 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	111 Obfuscated Files or Information	Cached Domain Credentials	13 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
jAjWw92QKR.exe	89%	ReversingLabs	ByteCode-MSIL.Backdoor.AsyncRat
jAjWw92QKR.exe	100%	Avira	TR/Dropper.Gen
jAjWw92QKR.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
windowsupdatebg.s.llnwi.net	178.79.238.0	true	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	jAjWw92QKR.exe, 00000000.00000002.2946371088.0000000002A81000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
46.253.4.252	unknown	Bulgaria		44814	BTEL-BG-ASBG	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1534485
Start date and time:	2024-10-15 23:11:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	5
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	jAjWw92QKR.exe renamed because original name is a hash value
Original Sample Name:	24c5c45311482c0f967bd93942fcfa01.exe
Detection:	MAL
Classification:	mal100.troj.evad.winEXE@1/2@0/1
EGA Information:	Failed
HCA Information:	Successful, ratio: 92% Number of executed functions: 231 Number of non-executed functions: 12
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 178.79.238.0
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, wu-b-net.trafficmanager.net, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target jAjWw92QKR.exe, PID 6896 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
VT rate limit hit for: jAjWw92QKR.exe

Simulations

Behavior and APIs

Time	Type	Description
17:12:06	API Interceptor	1x Sleep call for process: jAjWw92QKR.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
windowsupdatebg.s.llnwi.net	RCD_9384-39403-1.pdf	Get hash	malicious	Unknown	Browse	46.228.146.0
	https://whimsical.com/maryland-deli-provisions-BvzVjYjzBeaob2dyDXoWU7	Get hash	malicious	Unknown	Browse	178.79.238.128
	ordine.pdf	Get hash	malicious	HtmlDropper	Browse	178.79.238.128
	r8k29DBraE.exe	Get hash	malicious	XWorm	Browse	178.79.208.1
	Request for Quotation MK FMHS.RFQ.10.24.vbs	Get hash	malicious	GuLoader, Snake Keylogger	Browse	87.248.204.0
	Request for Quotation MK FMHS.RFQ.10.24.vbs	Get hash	malicious	Unknown	Browse	178.79.238.128
	https://jobs.sap.com/job/Walldorf-SAP-Ariba-Technology-Consultant-EMEA-ISBN-Technology-Services-%28Location-Germany%29-69190/1110452901/	Get hash	malicious	Unknown	Browse	87.248.204.0
	SecuriteInfo.com.W32.PossibleThreat.20383.9039.exe	Get hash	malicious	Unknown	Browse	46.228.146.0
	file.exe	Get hash	malicious	CobaltStrike	Browse	87.248.205.0
	https://saaxzz2569.cyou/m/user/index	Get hash	malicious	Unknown	Browse	87.248.204.0

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
BTEL-BG-ASBG	SecuriteInfo.com.FileRepMalware.16004.4080.exe	Get hash	malicious	Unknown	Browse	95.169.204.138
	SecuriteInfo.com.Trojan.WinGo.Agent.27329.6060.exe	Get hash	malicious	Unknown	Browse	95.169.204.138
	file.exe	Get hash	malicious	GCleaner, Raccoon Stealer v2	Browse	95.169.205.186
	xzQ4Zf3975.exe	Get hash	malicious	Raccoon Stealer v2	Browse	95.169.205.186
	60lAWJYfsL.exe	Get hash	malicious	Raccoon Stealer v2	Browse	95.169.205.186
	http://fwtnp.dfbf.maderclean.cl/giorgiobelfiore@dececco.it	Get hash	malicious	Unknown	Browse	185.7.219.103
	GVlpP9RL5t	Get hash	malicious	Mirai	Browse	95.169.222.123

Process:	C:\Users\user\Desktop\jAjWw92QKR.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Reputation:	high, very likely benign file
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Users\user\Desktop\jAjWw92QKR.exe
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	2.9844219596585932
Encrypted:	false
SSDEEP:	6:kKVVEF9Usw9L+N+SkQlPlEGYRMY9z+4KlDA3RUe/:tVdD9LNkPlE99SNxAhUe/
MD5:	CC520A50A64DE2DB7F6AC6D666AF5ADB
SHA1:	1FCD9055B45947647E2E393F5F8F4711EC14785F
SHA-256:	5D1E25B4ED6AFF3E1E196E9F718175C3CB2284305F01EC1CE702DB75587C9242
SHA-512:	DAD40A661CEDC8534098492C6875D9E509C968B2DDBA969F8832A352341608938F56190D32EE94F7AAB28EFE23824E84222571D8058D8D4BF716E81A60D93D17
Malicious:	false
Reputation:	low
Preview:	p...... ........,...F...(....................................................... ........G..@.......................h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	5.55565089576495
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.83% Win32 Executable (generic) a (10002005/4) 49.78% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01%
File name:	jAjWw92QKR.exe
File size:	48'640 bytes
MD5:	24c5c45311482c0f967bd93942fcfa01
SHA1:	446849e49154540e4395fc9eaaf96249deb05a3d
SHA256:	7937b40b93a7e937d0eb5d31b50e6d5e3782b7418d8e67848f13c807cd0eda31
SHA512:	295b2347dc72e8de91f3097ed042a956fe644a4ac3d99dc9038d1f36b4f9cc65f8ece1332e4018df3b02bae5e6729c6406caee6b8202930f53f24dba7b8773a1
SSDEEP:	768:guir1TUEFSuWUoV3kmo2qz64RzSZIJPI1uE40bMr2GlS/rE4hafwtpJHwyqiFH1i:guir1TUKP2UzK1uybMrZErE4ha4WydH0
TLSH:	26234E003BE9822BF2BE4F7499F22145467BB2677603DA4E1CC441DB5A13FC69A425FE
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....-e............................N.... ........@.. ....................... ............@................................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x40d04e
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x652DADE5 [Mon Oct 16 21:40:53 2023 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xd000	0x4b	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xe000	0x7ff	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x10000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0xb054	0xb200	69ec6000c71907ec9ce29e6f806f0f85	False	0.541454529494382	data	5.612760663918535	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0xe000	0x7ff	0x800	0f68ce4dd77ed0bb9c1e6b31f6995d94	False	0.41748046875	data	4.88506844918463	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x10000	0xc	0x200	91caef5211b2a1365e139b0b7bf07352	False	0.044921875	data	0.08153941234324169	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_VERSION	0xe0a0	0x2cc	data			0.43575418994413406
RT_MANIFEST	0xe36c	0x493	exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators			0.43381725021349277

Imports

DLL	Import
mscoree.dll	_CorExeMain

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-15T23:12:06.173668+0200	2842478	ETPRO JA3 Hash - Suspected ASYNCRAT Server Cert (ja3s)	1	46.253.4.252	6606	192.168.2.4	49730	TCP
2024-10-15T23:12:06.173668+0200	2030673	ET MALWARE Observed Malicious SSL Cert (AsyncRAT Server)	1	46.253.4.252	6606	192.168.2.4	49730	TCP
2024-10-15T23:12:06.173668+0200	2035595	ET MALWARE Generic AsyncRAT Style SSL Cert	1	46.253.4.252	6606	192.168.2.4	49730	TCP
2024-10-15T23:12:06.173668+0200	2035607	ET MALWARE Observed Malicious SSL Cert (AsyncRAT Server)	1	46.253.4.252	6606	192.168.2.4	49730	TCP
2024-10-15T23:13:09.283864+0200	2842478	ETPRO JA3 Hash - Suspected ASYNCRAT Server Cert (ja3s)	1	46.253.4.252	6606	192.168.2.4	49798	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 15, 2024 23:12:05.229437113 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:05.234731913 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:05.234872103 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:05.246093035 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:05.251106024 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:06.152034998 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:06.152092934 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:06.152272940 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:06.168736935 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:06.173667908 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:06.460849047 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:06.512664080 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:08.162599087 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:08.167742968 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:08.167968035 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:08.173026085 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:19.341694117 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:19.346658945 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:19.346889973 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:19.351888895 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:19.626007080 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:19.669023991 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:19.772562981 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:19.792299032 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:19.797518015 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:19.797586918 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:19.802438021 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:29.389188051 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:29.434587955 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:29.533404112 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:29.575165033 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:30.529567003 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:30.535137892 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:30.535229921 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:30.540514946 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:30.807286024 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:30.852097034 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:30.947535992 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:30.949947119 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:30.955118895 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:30.955215931 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:30.960603952 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:41.716803074 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:41.722042084 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:41.722371101 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:41.727319956 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:42.003494024 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:42.043941975 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:42.147878885 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:42.150419950 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:42.155469894 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:42.155698061 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:42.160770893 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:53.383940935 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:53.389091969 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:53.389293909 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:53.394311905 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:53.666352034 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:53.716094017 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:53.807585001 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:53.812381983 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:53.817714930 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:53.818084002 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:53.823030949 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:59.425653934 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:59.466078997 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:12:59.570260048 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:12:59.622229099 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:04.596399069 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:04.601385117 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:04.601464033 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:04.606664896 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:04.866615057 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:04.919080973 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:05.009094000 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:05.011421919 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:05.016848087 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:05.017049074 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:05.022099972 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:05.851830006 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:05.903353930 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:05.992178917 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:05.994929075 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.000586033 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.000755072 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.005779028 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.585215092 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.585577011 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.585599899 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.585654020 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.585700035 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.585725069 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.585753918 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.585788965 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.585803032 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.585825920 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.586343050 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.586355925 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.586520910 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.586535931 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.586566925 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.586582899 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.586599112 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.586604118 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.586628914 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.587156057 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.587207079 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.587213993 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.637810946 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.701502085 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.701539993 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.701555014 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.701570988 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.701718092 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.701719046 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.728833914 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.728852987 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.728868008 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.728950977 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.728965998 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.729058027 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.729058981 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.746490002 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.746556044 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.746571064 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.746701956 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.746702909 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.816931009 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.816947937 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.816971064 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.816987991 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.817002058 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.817023993 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.817174911 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.817176104 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.817176104 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.845536947 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.845552921 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.845566988 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.845679998 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.845694065 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.845772028 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.845772982 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.863641977 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.863699913 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.863714933 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.863729000 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.863866091 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.863867044 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.919011116 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.937235117 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.937269926 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.937284946 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.937323093 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.937453032 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.937453985 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.964543104 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.964567900 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.964652061 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.964675903 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.964695930 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.964713097 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.964728117 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.964754105 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.964797974 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.984219074 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.984235048 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.984251976 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.984386921 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.984402895 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.984404087 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.984416962 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:06.984494925 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:06.984494925 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.055222988 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.055269957 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.055284977 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.055346966 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.055452108 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.055452108 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.227626085 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.227642059 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.227658033 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.227672100 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.227686882 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.227832079 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.227832079 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.227840900 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.227890968 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.227900028 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.227906942 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.227943897 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.227958918 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.227966070 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.228009939 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.228691101 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.228740931 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.228755951 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.228795052 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.228809118 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.228823900 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.228863001 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.229549885 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.229599953 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.229604006 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.229623079 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.229655027 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.229665995 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.229669094 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.229712963 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.231103897 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.231152058 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.231165886 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.231179953 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.231199980 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.231231928 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.289922953 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.289947987 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.290149927 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.315265894 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.315280914 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.315296888 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.315320969 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.333379030 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.333421946 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.333432913 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.333513021 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.333513021 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.334634066 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.334642887 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.334652901 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.334794998 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.345302105 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.345316887 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.345359087 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.387866020 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.408284903 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.408314943 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.408513069 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.432096958 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.432110071 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.432118893 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.432265043 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.464178085 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.464257002 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.464267015 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.464282990 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.464303017 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.464312077 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.464323044 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.464349985 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.464355946 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.464355946 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.464396000 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.464535952 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.512784958 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.523941040 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.523963928 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.524104118 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.547755957 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.547772884 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.547806978 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.547827005 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.547837019 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.547877073 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.566028118 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.566190958 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.566205025 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.566227913 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.566446066 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.566447020 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.567508936 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.567553043 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.567569017 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.567703962 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.577223063 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.577261925 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.577270985 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.577474117 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.577475071 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.578346968 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.578378916 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.578437090 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.639435053 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.639451027 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.639525890 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.663264036 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.663285017 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.663474083 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.682308912 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.682339907 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.682347059 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.682466030 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.682544947 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.682554960 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.682578087 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.682578087 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.682667017 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.683301926 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.683322906 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.683408022 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.692831039 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.692848921 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.692861080 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.693041086 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.693830013 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.693841934 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.693852901 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.693897009 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.693897009 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.755269051 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.755280018 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.755474091 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.778601885 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.778708935 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.778965950 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.798074007 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.798088074 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.798099041 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.798320055 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.798336983 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.798347950 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.798356056 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.798455954 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.798455954 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.798455954 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.799233913 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.799284935 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.799297094 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.808315039 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.808335066 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.808387995 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.808510065 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.808511019 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.809369087 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.809386015 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.809398890 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.809562922 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.870713949 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.870724916 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.870951891 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.894001961 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.894242048 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.894422054 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.913310051 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.913321972 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.913402081 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.913410902 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.913508892 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.913536072 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.913611889 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.913611889 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.914339066 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.914371014 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.914427042 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.914437056 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:07.914555073 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:07.914556026 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:08.385389090 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:08.389197111 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:08.390233994 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:08.390408039 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:08.394103050 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:08.394306898 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:08.395234108 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:08.395236969 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:08.400059938 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.277746916 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.278870106 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.283864021 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.470168114 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.470169067 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.475543976 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.475562096 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.475590944 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.475601912 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.475667953 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.475682020 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.475712061 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.475727081 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.475765944 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.475805998 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.475807905 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.475820065 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.475846052 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.475847960 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.475873947 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.475941896 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.475943089 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.480811119 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.480842113 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.480880022 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.480891943 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.481014013 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.481019020 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.481138945 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.481151104 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.481182098 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.481313944 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.486069918 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.486279964 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.486471891 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.491475105 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.511241913 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.516204119 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.518219948 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.523195982 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.551686049 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.556906939 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.558197021 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.563174963 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.574542046 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.580008030 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.582081079 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.586987972 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.604509115 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.609694958 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.612202883 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.617122889 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.635473967 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.640427113 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.642200947 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.647391081 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.666171074 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.673434019 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.678138018 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.683182955 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.684252024 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.689331055 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.713046074 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.717962027 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.720156908 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.725096941 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.744575024 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.749546051 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.749648094 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.754713058 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.775542974 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.780451059 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.782243967 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.787343025 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.791634083 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.796663046 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.797178984 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.802140951 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.822365046 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.827342033 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.830193043 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.835134029 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.854855061 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.859764099 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.859958887 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.864933968 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.917212963 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.922261000 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.922393084 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.927475929 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.947137117 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.952195883 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.952470064 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.957545042 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.980652094 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.985613108 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:09.985712051 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:09.990582943 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.010750055 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.015588999 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.015738010 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.020601034 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.040575027 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.045545101 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.045747042 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.050702095 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.056282997 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.061249971 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.061474085 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.066333055 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.071454048 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.076363087 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.076448917 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.082302094 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.087640047 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.092581034 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.092648983 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.097510099 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.102803946 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.107814074 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.108010054 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.112931013 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.118416071 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.123327017 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.123428106 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.128469944 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.134210110 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.139360905 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.139492989 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.144387007 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.149976969 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.155021906 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.155220985 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.160243988 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.180740118 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.185668945 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.185760975 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.190772057 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.197859049 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.202840090 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.203011036 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.207931042 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.254101992 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.259056091 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.259238958 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.264166117 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.275446892 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.280330896 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.280508041 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.285471916 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.306430101 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.311342955 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.311403036 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.316263914 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.323467970 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.328371048 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.328588963 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.333687067 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.354264975 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.359381914 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.359455109 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.365575075 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.383497953 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.388499975 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.388674021 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.394231081 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.398967981 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.404175997 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.404257059 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.409250975 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.415461063 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.420342922 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.420517921 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.425589085 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.446069002 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.476986885 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.477197886 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.484337091 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.484529018 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.490528107 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.508097887 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.513046026 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.513243914 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.519963026 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.524736881 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.530281067 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.530457020 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.535639048 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.556648970 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.561925888 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.562076092 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.567183018 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.595937967 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.600915909 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.601089001 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.606031895 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.634737968 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.639986992 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.640153885 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.645195007 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.665616989 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.670687914 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.670869112 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.675962925 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.681992054 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.686943054 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.687138081 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.692894936 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.717896938 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.723151922 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.723325968 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.728919983 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.748966932 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.754008055 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.754252911 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.759569883 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.778716087 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.783756018 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.783970118 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.788857937 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.812491894 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.817303896 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.817457914 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.822357893 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.841722965 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.846744061 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.846924067 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.851794004 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.867521048 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.872525930 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.872596025 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.878026009 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.886848927 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.891772032 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.891851902 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.896754026 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.949559927 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.954739094 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.954935074 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:10.959913969 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:10.996433973 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.001333952 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.001410007 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.006463051 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.040678024 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.045687914 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.045775890 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.051738024 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.071774960 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.076757908 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.076849937 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.081942081 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.087274075 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.092286110 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.092480898 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.097518921 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.118212938 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.123199940 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.123428106 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.128366947 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.134037018 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.138947964 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.139143944 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.144289970 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.166403055 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.171502113 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.171583891 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.176474094 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.213336945 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.218302011 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.218442917 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.223350048 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.245711088 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.250848055 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.251027107 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.256103039 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.307409048 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.312454939 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.312652111 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.317811012 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.339415073 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.344324112 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.344486952 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.349421978 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.369462013 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.374443054 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.374644995 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.379832983 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.416681051 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.416749001 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.421583891 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.421612024 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.421797991 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.479072094 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.479072094 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.484023094 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.484148979 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.508569956 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.513626099 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.513830900 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.518838882 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.540364027 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.546029091 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.546130896 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.551104069 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.578269958 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.588118076 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.588212967 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.593149900 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.638936996 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.643882990 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.644099951 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.649338007 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.669178009 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.674328089 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.674420118 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.679466963 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.699867964 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.704880953 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.705066919 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.710103989 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.746117115 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.751633883 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.751703024 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.756534100 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.778628111 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.784797907 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.784863949 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.789747000 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.826483011 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.833017111 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.833152056 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.838284016 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.857053041 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.862188101 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.862390995 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.867338896 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.888438940 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.893515110 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.893639088 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.898474932 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.918281078 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.923247099 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.923441887 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.928373098 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.984451056 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.989706039 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:11.989831924 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:11.994743109 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.030067921 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.035325050 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.035485983 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.040484905 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.057133913 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.066145897 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.066349983 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.071440935 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.089725018 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.094921112 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.095120907 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.100034952 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.122113943 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.127154112 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.127357006 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.132278919 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.151031971 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.156143904 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.156215906 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.163310051 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.185060024 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.190057993 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.190282106 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.195290089 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.216965914 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.221992016 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.222079039 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.226975918 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.249552965 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.255043983 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.255146980 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.260029078 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.301213026 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.307609081 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.307790041 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.312730074 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.322561026 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.328119040 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.328372002 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.333528996 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.363548040 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.368602037 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.368777990 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.373800039 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.423186064 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.436676025 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.436903000 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.442549944 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.449230909 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.469976902 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.470182896 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.475215912 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.479976892 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.486299038 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.486485004 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.494906902 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.511198044 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.521410942 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.521673918 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.526685953 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.546339035 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.552290916 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.552347898 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.557358980 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.576678991 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.583093882 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.583302975 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.588291883 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.604892969 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.612391949 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.612452984 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.619082928 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.662185907 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.668128014 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.668214083 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.675112963 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:12.697901011 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.729702950 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.790380955 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.852169991 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.917582035 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.992683887 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:12.997169018 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.606610060 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.750453949 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.750487089 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.750569105 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.750726938 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.750726938 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.750726938 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.752027035 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.752129078 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.752793074 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.752899885 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.753318071 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.753365993 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.753844976 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.753954887 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.753976107 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.754519939 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.754569054 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.755650043 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.755723000 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.755805016 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.755831003 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.755856037 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.755878925 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.755878925 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.755923986 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.758936882 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.758997917 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.759017944 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.760948896 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.760976076 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.761018991 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.761027098 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.761054039 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.761099100 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.761125088 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.761149883 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.761179924 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.764020920 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.764046907 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.766096115 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.795548916 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.800611973 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.800791979 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.805744886 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.827181101 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.832124949 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.832289934 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.837232113 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.857476950 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.862441063 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.862633944 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.867556095 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.894876957 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.899831057 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.900003910 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.904891968 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.917948008 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.923016071 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.923185110 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.928580046 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.949498892 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.954531908 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.954722881 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.959682941 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.978339911 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.983508110 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:13.985234976 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:13.990098953 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.019704103 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.024899960 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.026988983 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.032058954 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.057118893 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.062119007 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.066231012 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.071275949 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.088299036 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.093590021 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.096317053 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.101366043 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.138679981 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.143769979 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.144290924 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.149168968 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.189069033 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.194273949 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.198194981 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.203145981 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.212234974 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.217263937 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.222322941 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.227224112 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.242221117 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.247173071 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.249214888 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.254061937 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.278774023 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.284056902 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.284261942 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.289169073 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.308590889 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.479921103 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.622303009 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.680624962 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.680747986 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.680773973 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.680969954 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.681000948 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.685941935 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.686013937 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.723767042 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.728729963 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.729110003 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.734025002 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.745951891 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.751065969 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.751564980 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.756424904 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.774581909 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.779624939 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.779797077 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.784637928 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.808857918 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.813807964 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.814162970 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.819092989 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.856000900 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.860966921 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.862289906 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.867135048 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.903527021 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.908526897 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.908596039 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.913402081 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.931804895 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.936686993 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.936759949 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.941602945 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.963167906 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.968122005 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.968180895 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:14.973037958 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:14.999717951 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.004673958 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.004760981 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.009691000 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.063350916 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.068747044 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.068953991 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.073784113 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.087846041 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.092854977 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.092935085 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.097901106 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.153863907 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.159008980 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.159223080 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.164051056 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.196074009 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.200994968 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.201078892 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.205946922 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.227498055 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.232494116 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.232597113 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.237518072 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.258157969 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.263195038 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.263283968 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.268145084 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.292042971 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.297329903 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.297538996 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.302459955 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.320317030 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.325310946 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.325495958 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.330557108 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.352782965 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.357830048 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.358036041 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.362999916 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.424122095 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.429114103 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.429172993 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.434070110 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.454507113 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.464217901 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.464387894 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.469250917 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.479542017 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.484484911 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.484574080 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.489448071 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.510098934 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.515008926 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.515104055 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.520065069 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.541851044 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.546767950 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.546859026 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.551721096 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.572896957 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.577801943 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.577878952 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.582756996 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.605176926 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.610030890 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.610124111 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.614963055 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.634140015 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.639123917 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.639219046 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.644133091 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.650142908 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.655095100 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.655328035 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.660232067 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.700560093 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.705730915 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.705841064 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.710771084 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.746587992 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.751965046 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.752136946 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.757116079 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.763214111 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.768121958 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.768345118 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.773313999 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.775362015 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.780508041 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.780692101 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.785617113 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.809181929 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.814970970 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.815076113 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.820060968 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.839920998 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.845240116 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.845460892 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.850786924 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.868654013 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.874049902 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.874120951 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.879080057 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.903455973 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.908627987 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.908854008 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.913767099 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.934489012 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.939924002 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.940109015 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.945106983 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.965432882 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.970498085 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.970611095 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.975545883 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.993856907 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:15.999273062 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:15.999341965 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.004208088 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.030375957 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.035615921 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.035861015 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.041013002 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.083508968 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.088793993 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.088871002 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.093751907 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.119457006 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.124408960 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.124492884 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.129442930 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.165359020 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.170274973 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.170326948 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.175179005 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.199255943 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.204752922 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.204893112 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.209757090 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.229876041 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.234903097 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.234982014 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.239147902 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.239854097 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.261218071 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.266226053 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.266294956 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.271171093 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.293256998 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.294169903 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.298188925 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.298393965 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.303350925 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.323985100 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.329020977 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.329261065 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.334155083 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.352014065 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.356976032 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.357173920 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.362122059 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.379594088 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.380470991 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.385339022 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.385551929 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.388991117 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.390455008 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.395256996 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.395471096 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.400362015 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.445893049 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.472418070 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.472515106 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.477443933 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.495364904 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.500418901 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.500637054 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.505544901 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.526706934 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.531757116 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.531959057 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.536900997 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.558962107 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.564122915 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.564349890 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.569297075 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.590212107 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.595444918 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.595520973 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.601258039 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.618083954 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.624800920 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.624870062 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.629786015 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.635083914 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.639931917 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.639990091 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.644874096 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.684339046 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.689346075 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.689428091 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.694391012 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.725750923 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.730829954 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.731036901 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.736192942 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.803014040 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.808058023 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.808155060 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.813158989 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.825989008 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.830961943 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.831217051 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.837003946 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.881567001 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.887321949 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.887526989 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.892568111 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.900484085 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.905669928 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.905925989 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.910948992 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.942429066 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.947673082 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.947920084 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.952841997 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.963506937 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.968491077 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:16.968708992 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:16.973742962 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.005970955 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.010988951 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.011276007 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.016210079 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.048917055 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.054040909 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.054366112 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.059684038 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.081286907 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.086694002 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.086946964 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.091980934 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.143260002 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.148952007 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.149154902 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.154546022 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.202060938 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.207724094 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.207902908 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.212892056 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.231375933 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.236315012 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.236505032 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.241463900 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.262552023 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.267797947 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.267878056 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.272941113 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.291974068 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.297055960 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.297270060 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.302187920 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.323117971 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.328075886 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.328299046 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.333446026 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.352822065 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.357808113 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.358002901 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.362912893 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.406971931 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.406971931 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.411993027 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.412097931 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.466161966 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.471108913 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.471309900 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.476242065 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.527539015 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.527672052 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.532516003 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.532567024 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.532623053 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.532649994 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.558549881 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.563826084 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.563920021 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.568964005 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.589651108 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.594640970 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.594726086 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.599678993 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.626846075 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.631923914 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.632294893 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.637329102 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.651154995 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.656100988 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.656286001 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.661178112 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.685560942 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.690412045 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.690603971 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.695602894 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.714591980 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.719629049 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.719830990 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.724752903 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.745913029 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.750919104 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.751149893 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.756084919 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.776385069 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.781385899 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.781593084 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.786514997 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.826812983 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.831882954 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.831954002 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.837133884 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.854752064 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.859725952 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.859913111 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.864790916 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.884231091 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.889218092 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.889419079 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.894385099 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.917938948 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.923156977 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.923459053 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.928519011 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.949028015 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.953912973 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.954238892 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.959752083 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.981344938 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.986305952 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:17.986402988 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:17.991319895 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.016046047 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.021621943 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.021841049 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.026803970 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.041799068 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.046979904 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.047349930 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.052284002 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.074089050 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.079082012 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.079319954 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.084471941 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.108756065 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.114018917 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.114269018 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.119281054 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.173201084 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.178165913 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.178432941 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.183439016 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.199985027 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.204904079 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.205128908 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.210187912 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.233043909 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.238101959 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.238306999 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.243313074 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.268126011 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.273212910 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.273410082 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.278398991 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.337694883 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.337696075 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.342945099 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.342974901 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.355703115 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.361118078 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.361413002 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.366478920 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.386260986 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.391271114 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.391478062 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.404243946 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.424818993 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.429879904 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.430082083 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.435069084 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.470990896 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.479310036 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.479432106 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.484493017 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.537017107 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.541949987 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.542180061 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.547174931 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.560564041 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.565597057 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.565848112 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.570811033 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.607244968 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.612139940 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.612355947 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.617388964 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.652436972 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.657378912 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.657577038 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.662636042 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.683243036 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.688179970 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.688388109 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.693420887 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.713597059 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.718749046 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.718981981 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.724003077 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.749047995 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.754425049 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.754523039 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.759496927 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.776194096 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.781096935 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.781336069 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.786464930 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.807980061 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.815769911 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.815988064 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.822577000 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.849104881 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.855591059 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.855779886 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.860979080 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.891529083 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.901587009 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.901799917 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.908312082 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.931550980 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.937297106 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.937406063 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.942306042 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.946185112 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.951953888 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.952099085 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.957106113 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.961467981 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.966684103 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.966754913 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.972312927 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.989484072 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:18.994762897 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:18.994899988 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:19.000874996 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.043519020 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:19.043519020 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:19.048773050 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.048835039 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.048950911 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.107906103 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:19.107906103 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:19.173197985 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:19.252707005 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:19.419133902 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:19.424284935 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.424336910 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.424366951 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.424535036 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:19.424535036 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:19.424897909 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.424961090 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.425086021 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:19.425086975 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:19.425235987 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.425261974 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.425304890 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:19.425518036 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.425544977 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.425570011 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.425600052 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.425626040 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.425652981 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.429527998 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.429554939 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.429585934 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.429732084 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:19.429910898 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.430041075 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.430073023 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.430198908 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.430248022 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.430289984 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.434617043 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.480482101 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:19.485542059 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.485754013 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:19.490703106 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.654922009 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:19.808970928 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.809197903 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:19.814088106 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.932491064 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:19.937474966 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:19.937684059 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:19.942713976 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.014744997 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.019714117 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.019926071 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.024811029 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.047079086 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.051933050 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.052185059 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.057228088 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.074610949 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.079507113 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.079696894 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.084721088 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.121462107 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.126378059 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.126451015 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.131345987 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.169553995 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.174525976 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.174607038 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.179656982 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.218585014 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.223556042 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.223823071 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.228707075 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.247522116 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.252438068 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.252547026 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.257605076 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.283375978 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.288995981 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.289320946 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.294214010 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.312412977 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.317673922 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.317912102 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.323858976 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.351120949 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.356234074 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.356467009 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.361361980 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.385248899 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.390333891 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.390542984 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.395606995 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.428852081 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.433794022 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.433962107 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.464453936 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.466217995 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.471308947 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.471380949 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.476306915 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.516957045 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.522062063 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.522263050 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.528404951 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.570015907 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.575447083 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.575525045 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.580566883 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.611932993 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.617610931 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.617691040 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.623136997 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.637593985 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.642611027 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.642788887 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.647882938 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.669584036 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.674704075 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.674916983 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.679841995 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.715755939 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.721086979 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.721254110 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.726419926 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.747037888 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.752018929 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.752211094 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.757219076 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.776489019 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.781434059 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.781505108 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.786806107 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.807226896 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.812218904 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.812391043 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.817328930 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.838165045 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.845551968 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.845638037 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.850795984 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.871057987 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.876007080 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.876172066 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.881061077 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.911911011 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.916960001 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.917133093 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.922025919 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.950829983 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.955993891 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.956103086 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:20.960963964 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:20.996742010 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.001928091 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.002022982 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.006944895 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.026016951 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.030936956 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.031107903 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.036077023 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.055171967 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.060484886 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.060914993 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.065968037 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.087457895 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.092489958 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.092755079 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.097680092 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.120748997 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.125824928 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.128710032 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.134861946 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.149313927 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.154922009 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.156728983 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.161760092 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.180048943 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.184937954 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.185168028 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.190267086 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.212845087 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.217991114 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.218183994 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.223069906 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.311969995 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.311970949 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.316996098 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.317055941 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.317085981 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.389914036 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.389914036 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.394897938 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.394952059 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.394979000 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.395004034 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.433551073 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.462949991 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.464646101 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.469907045 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.478492975 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.483505011 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.483617067 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.488517046 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.496742010 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.501722097 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.501813889 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.506752014 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.543323040 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.543323040 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.548317909 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.548360109 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.614106894 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.619067907 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.619244099 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.624154091 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.653595924 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.658516884 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.658788919 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.663786888 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.685894966 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.690779924 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.691066027 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.695980072 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.733480930 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.738416910 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.738621950 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.743803024 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.777677059 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.782764912 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.782968044 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.787849903 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.808787107 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.813966990 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.814203978 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.819124937 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.837570906 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.842746019 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.842955112 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.847872972 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.871500969 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.876517057 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.879791975 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.884780884 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.937957048 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.942897081 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.946259022 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.951239109 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.963012934 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.967905045 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.968241930 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:21.973211050 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:21.997047901 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.002019882 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.006092072 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.011101961 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.025233030 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.030231953 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.034239054 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.039216995 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.045443058 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.050604105 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.051496029 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.056401968 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.121272087 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.126682043 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.128274918 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.133301020 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.151153088 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.156318903 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.158287048 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.163170099 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.181215048 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.186214924 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.186444998 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.191380024 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.213257074 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.218852997 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.222218037 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.227092981 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.258948088 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.264091969 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.266360998 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.271316051 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.312372923 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.312419891 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.317249060 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.317394018 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.440515041 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.440665960 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.445544004 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.445667982 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.489161968 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.489161968 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.494116068 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.494144917 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.494250059 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.494277000 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.631800890 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.631800890 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.636881113 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.636955023 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.636996984 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.637025118 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.801095009 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.805986881 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.806175947 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.811144114 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.845382929 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.850778103 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.851144075 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.856116056 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.874066114 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.879051924 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.879137039 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.884176970 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.918487072 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.923405886 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.923809052 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.928920031 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.965857983 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.970948935 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:22.971014977 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:22.975997925 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.018255949 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.023211956 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.023428917 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.028872013 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.066056013 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.071620941 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.071818113 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.077241898 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.098328114 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.105079889 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.105226040 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.112004995 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.125114918 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.131758928 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.131995916 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.138864040 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.169770002 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.176686049 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.176872015 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.183603048 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.206612110 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.213277102 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.213505983 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.220113039 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.247076035 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.247076035 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.252161980 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.252213001 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.296464920 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.296464920 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.301687956 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.301716089 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.301743031 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.301769972 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.341435909 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.341435909 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.346509933 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.346575022 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.346602917 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.346628904 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.425252914 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.425252914 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.425252914 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.430349112 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.430377960 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.430489063 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.430516005 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.467753887 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.467753887 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.472687006 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.472800970 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.472867966 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.532183886 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.532305956 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.537419081 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.537502050 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.537630081 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.574486017 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.574486017 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.638798952 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.701200962 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.775221109 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.822259903 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.872294903 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.937896013 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.938373089 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.938458920 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.938992023 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.939039946 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.939166069 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.939166069 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.939192057 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.939270973 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.939634085 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.939702034 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.940124989 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.940151930 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.940357924 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.940660954 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.940767050 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.940974951 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.943572998 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.943608046 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.943860054 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.944061041 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.944108009 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.944415092 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.944441080 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.944650888 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.944724083 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.948853016 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.951152086 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.957355976 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.957540989 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.963148117 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.981677055 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.986597061 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:23.986835003 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:23.991820097 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.012509108 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.017667055 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.017884970 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.022825003 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.040575027 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.045648098 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.045857906 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.050792933 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.085844040 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.090780020 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.091007948 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.095930099 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.103890896 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.108772993 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.108841896 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.113677979 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.141062021 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.146060944 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.146315098 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.151273012 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.170380116 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.175586939 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.175793886 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.180831909 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.201837063 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.206943035 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.207180977 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.212332010 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.232822895 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.237966061 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.238195896 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.243165970 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.263612986 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.268698931 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.269007921 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.274344921 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.310996056 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.316004992 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.316186905 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.321194887 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.358571053 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.363558054 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.363653898 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.368733883 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.393084049 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.398058891 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.398292065 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.403359890 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.431746960 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.436922073 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.437140942 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.442656994 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.471692085 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.476666927 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.476881027 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.481843948 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.501894951 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.507091999 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.507173061 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.512299061 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.530561924 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.536089897 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.536315918 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.541266918 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.562186003 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.567317963 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.567539930 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.572515965 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.609616041 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.614747047 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.614969969 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.619951963 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.640275002 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.645411015 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.645529985 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.650547981 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.671770096 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.677108049 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.677232981 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.682111025 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.707673073 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.712552071 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.712662935 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.717503071 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.782912016 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.788233042 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.788456917 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.793365955 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.834199905 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.839179993 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.839415073 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.844356060 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.879786968 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.884917974 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.885134935 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.890048981 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.933222055 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.938306093 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.938493013 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.943427086 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.989731073 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:24.994705915 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:24.995373964 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:25.001621962 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:25.026168108 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:25.031097889 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:25.031932116 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:25.036911011 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:25.118983984 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:25.124138117 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:25.126219034 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:25.131129026 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:25.165537119 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:25.170833111 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:25.174329996 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:25.179272890 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:25.822679996 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:25.823040962 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:25.827554941 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:25.828116894 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:25.828144073 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:25.828190088 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:25.828216076 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:25.860443115 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:25.865375996 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:25.865478039 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:25.870496988 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:25.913058043 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:25.917953014 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:25.918044090 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:25.922996998 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:25.973444939 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:25.978353977 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:25.978581905 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:25.983536959 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.018518925 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.023487091 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.023580074 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.028523922 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.060672045 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.065634966 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.065859079 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.070811987 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.103275061 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.108381033 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.108577967 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.113471031 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.164530993 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.169706106 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.169915915 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.174916029 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.183439970 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.188465118 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.188652992 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.193602085 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.239367008 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.244358063 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.244570971 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.249567986 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.298552036 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.303689957 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.303958893 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.309205055 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.343117952 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.348531008 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.348819971 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.353740931 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.368983030 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.374053955 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.374200106 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.379149914 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.412913084 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.418157101 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.418442965 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.423468113 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.455358982 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.462105036 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.462450981 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.467354059 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.485578060 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.490623951 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.490928888 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.495877028 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.528153896 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.533113956 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.533179045 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.538067102 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.557184935 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.562117100 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.562196970 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.567104101 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.598810911 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.603744984 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.603821993 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.608788967 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.663216114 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.668720961 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.668920040 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.674021959 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.681752920 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.686763048 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.686964989 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.691883087 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.706718922 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.711718082 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.711951017 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.717129946 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.727751970 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.733103991 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.733165979 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.738217115 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.763431072 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.768346071 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.768558025 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.773545027 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.806139946 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.811094046 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.811218023 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.816168070 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.854931116 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.860313892 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.860594988 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.866265059 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.903531075 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.908595085 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.908775091 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.913750887 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.939812899 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.944916010 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.945127010 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.950117111 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.950844049 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.955790997 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.955982924 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.960968018 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.978984118 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.983910084 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.984101057 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.989068031 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.993402958 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:26.998344898 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:26.998421907 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.003360987 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.008451939 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.013519049 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.013622046 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.018517971 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.023602009 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.028574944 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.028747082 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.033776999 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.051666975 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.056669950 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.056865931 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.061734915 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.076721907 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.081752062 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.081995010 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.087012053 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.109761000 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.114713907 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.114897013 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.120254993 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.140122890 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.145230055 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.145417929 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.150449038 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.183639050 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.188613892 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.188812971 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.193726063 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.217235088 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.222151995 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.222336054 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.227245092 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.246254921 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.251285076 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.251374006 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.256364107 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.285064936 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.290014982 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.290246964 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.295178890 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.344275951 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.349246025 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.349370003 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.354244947 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.392237902 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.397182941 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.397521019 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.402507067 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.424124002 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.429267883 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.429519892 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.434695005 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.474637985 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.479594946 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.479837894 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.484761953 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.495740891 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.500654936 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.500870943 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.506026030 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.525935888 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.530888081 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.531044960 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.533658028 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.535954952 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.575386047 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.578917980 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.584202051 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.584503889 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.589420080 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.605118036 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.610048056 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.610266924 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.615184069 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.639067888 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.643970013 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.644155025 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.649039030 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.673937082 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.676577091 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.681514978 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.681684971 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.683352947 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.687016010 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.688565969 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.688627005 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.693641901 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.713844061 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.718910933 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.719119072 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.724098921 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.746205091 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.751367092 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.751528978 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.756545067 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.777479887 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.782428980 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.782659054 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.787568092 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.828022003 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.832940102 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.833026886 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.837975025 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.871486902 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.876409054 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.876641035 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.881565094 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.901228905 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.906150103 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.906377077 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.911329031 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.935956955 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.940963030 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.941236019 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.946156025 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.965459108 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.970374107 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:27.970562935 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:27.975575924 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.029148102 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.034154892 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.034244061 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.039161921 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.058176041 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.063128948 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.063374996 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.068327904 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.089643955 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.094691992 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.094896078 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.099814892 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.122361898 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.127357960 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.127463102 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.132364035 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.153172970 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.158215046 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.158557892 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.163439989 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.179939985 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.184906006 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.185110092 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.190149069 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.216588974 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.221534014 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.221790075 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.226670027 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.245879889 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.250823975 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.251024008 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.255877972 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.291436911 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.296442986 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.296508074 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.301441908 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.324997902 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.329935074 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.330108881 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.334975004 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.376666069 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.381541014 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.381736994 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.387129068 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.403579950 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.408493996 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.408678055 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.413608074 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.434824944 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.461642981 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.461858988 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.466790915 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.466996908 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.471856117 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.496798038 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.501754999 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.501833916 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.506870985 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.526860952 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.533540010 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.533638000 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.538551092 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.557079077 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.562187910 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.562272072 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.567161083 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.587892056 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.592946053 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.593038082 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.597995043 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.622157097 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.627896070 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.628083944 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.633034945 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.655440092 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.660767078 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.660933018 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.666280031 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.702799082 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.709126949 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.709220886 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.714268923 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.730597973 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.735670090 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.735860109 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.741837025 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:28.772241116 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:28.932291031 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.075460911 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.137963057 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.138139009 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.138195992 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.138223886 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.138264894 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.138289928 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.143240929 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.143268108 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.143495083 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.148375988 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.164784908 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.169879913 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.169959068 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.174915075 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.206742048 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.211836100 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.212050915 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.217076063 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.243500948 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.248966932 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.249141932 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.254008055 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.276012897 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.281584978 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.281649113 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.286638975 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.313062906 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.317964077 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.318180084 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.323062897 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.346852064 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.351813078 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.351914883 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.357342005 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.386717081 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.391678095 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.391858101 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.396914005 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.424552917 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.429486036 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.429651976 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.435317039 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.449743986 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.468688011 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.468888998 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.474421978 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.481849909 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.486963034 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.487015963 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.491910934 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.531203032 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.536612988 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.536793947 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.541929960 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.558768988 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.563738108 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.563898087 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.569108009 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.591505051 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.597042084 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.597239017 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.605225086 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.624891996 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.629920006 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.630120039 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.635057926 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.651082993 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.656238079 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.656497002 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.661475897 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:29.687741995 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.856499910 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.951509953 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:29.997297049 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.606672049 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.739360094 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.739523888 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.739671946 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.739698887 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.739813089 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.739903927 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.739903927 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.739903927 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.741602898 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.741920948 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.742541075 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.742686033 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.742923975 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.747880936 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.748087883 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.748517990 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.748548031 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.748711109 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.748711109 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.748852968 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.748879910 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.749072075 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.749072075 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.749072075 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.753726959 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.753776073 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.753803968 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.753864050 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.754092932 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.754121065 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.754146099 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.754179001 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.754179001 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.754215002 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.758882046 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.758908033 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.758987904 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.759207964 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.759233952 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.779776096 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.785012007 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.785195112 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.790188074 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.808552980 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.813663960 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.813846111 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.818792105 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.839095116 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.844099998 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.844289064 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.849262953 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.869623899 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.874814034 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.874943018 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.879899979 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.898952007 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.903862000 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.904072046 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.908932924 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.930571079 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.935699940 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.935914993 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.940920115 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.960932016 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.965955019 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.966145992 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.971235991 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.978780985 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.983768940 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:30.984055996 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:30.988970041 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.010230064 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.041919947 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.135478973 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.195372105 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.225258112 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.225289106 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.225574017 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.225861073 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.225943089 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.225989103 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.226103067 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.235327005 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.240293980 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.240488052 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.245379925 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.278867960 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.283723116 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.283901930 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.288830042 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.310501099 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.315380096 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.315481901 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.320373058 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.355031967 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.359973907 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.360181093 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.365103960 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.402597904 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.407512903 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.407836914 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.412709951 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.499937057 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.499937057 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.504920006 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.504945040 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.504964113 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.505028009 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.545515060 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.545618057 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.550496101 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.550508976 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.550520897 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.550542116 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.550734043 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.606177092 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.606264114 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.611115932 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.611128092 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.611149073 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.611160994 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.611247063 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.650981903 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.655872107 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.656076908 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.660978079 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.683969975 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.862693071 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.912977934 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.913007975 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.913147926 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.913187981 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.918088913 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.931900024 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.936825037 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.937031984 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.941929102 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.963135004 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.968183994 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:31.968398094 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:31.973326921 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.013645887 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.018661022 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.018860102 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.023818016 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.040735006 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.045619011 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.045821905 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.050878048 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.070672035 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.075768948 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.076145887 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.081126928 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.103966951 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.109025955 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.109270096 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.114212036 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.159966946 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.164916039 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.165007114 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.170011997 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.180927992 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.186158895 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.186223984 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.191215038 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.216809988 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.221990108 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.222280979 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.227199078 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.263627052 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.268616915 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.268815041 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.273818970 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.289215088 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.294147015 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.294327021 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.299485922 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.327523947 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.332654953 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.332849026 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.337752104 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.356734991 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.361706018 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.361891985 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.366807938 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.382843971 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.387849092 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.387928963 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.392909050 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.418108940 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.423084021 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.423161983 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.428107023 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.470252037 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.475955009 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.476061106 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.481127024 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.493139029 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.498651028 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.498752117 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.505243063 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.529162884 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.534203053 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.534404039 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.539530993 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.574240923 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.579406977 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.579477072 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.584522963 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.608819008 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.614281893 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.614582062 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.619632959 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.650496006 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.655704021 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.655910015 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.661288977 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.689500093 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.695034981 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.695234060 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.700505972 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.721683025 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.726897955 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.727694988 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.732721090 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.760771990 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.765697002 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.765918970 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.770827055 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.792790890 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.797765970 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.797962904 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.802865028 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.859427929 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.864470005 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.864556074 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.869527102 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.903426886 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.908770084 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.909004927 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.914011955 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.938874960 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.943972111 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.944169044 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.949331999 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.976507902 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.981421947 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:32.981637001 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:32.986593962 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.009080887 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.014249086 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.014425039 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.019366026 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.041809082 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.046847105 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.047018051 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.052128077 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.074872971 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.079802990 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.080065966 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.084969044 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.105778933 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.110799074 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.110881090 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.115828037 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.135278940 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.140434027 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.140549898 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.145536900 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.187891960 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.193242073 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.193481922 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.199013948 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.212752104 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.218471050 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.218553066 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.226247072 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.247893095 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.253173113 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.253396034 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.258413076 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.290415049 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.296046972 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.296252012 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.301810026 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.320653915 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.325757027 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.325937986 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.330907106 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.337251902 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.342880964 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.343202114 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.348705053 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.352644920 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.357651949 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.357958078 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.362932920 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.371054888 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.376068115 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.376152039 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.381156921 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.418329000 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.424467087 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.424654007 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.429575920 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.446515083 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.468055964 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.468334913 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.473335981 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.479306936 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.484456062 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.484760046 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.489806890 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.541968107 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.547039032 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.547214031 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.552222013 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.578610897 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.583791018 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.583965063 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.589246988 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.615881920 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.620975971 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.621189117 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.626133919 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.639936924 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.644916058 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.645107985 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.650443077 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.668569088 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.674156904 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.674405098 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.679409027 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.699184895 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.704171896 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.704366922 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.709341049 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.731003046 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.736074924 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.736321926 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.741331100 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.760704041 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.765783072 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.766019106 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.771034002 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.792771101 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.798091888 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.798289061 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.803222895 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.824870110 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.831209898 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.831427097 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.837105036 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.861021996 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.866076946 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.866283894 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.871366024 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.885257006 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.890836954 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.891052961 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.896275997 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.918271065 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.923315048 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.923427105 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.928436041 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.949359894 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.954657078 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.954876900 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.959875107 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.982003927 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.986938000 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:33.987116098 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:33.992142916 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.012145042 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.017297029 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.017376900 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.022352934 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.044821024 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.050013065 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.050297022 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.055337906 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.107741117 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.112782001 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.113006115 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.117924929 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.136671066 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.141649961 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.141853094 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.146796942 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.176413059 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.181622028 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.181972027 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.187171936 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.206233025 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.211421967 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.211503029 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.216531038 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.232753038 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.237905979 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.238096952 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.243154049 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.263447046 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.268568039 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.268805981 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.273783922 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.292105913 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.297142029 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.297338009 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.302300930 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.321175098 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.326178074 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.326396942 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.331401110 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.357547045 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.362643003 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.362791061 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.367762089 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.402903080 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.413651943 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.413856030 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.420917034 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.431277037 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.436276913 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.436486959 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.463428020 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.463556051 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.468461990 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.468707085 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.473658085 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.499182940 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.668277979 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.809787989 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.837646008 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.837671995 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.837685108 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.837718964 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.837718964 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.838033915 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.842714071 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.842729092 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.889792919 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.894750118 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.894982100 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.899879932 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.925132036 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.930120945 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.930322886 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.935224056 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.969419956 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.974323034 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.974392891 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:34.979337931 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:34.996135950 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.001271009 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.001481056 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.006606102 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.031460047 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.036407948 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.036583900 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.041547060 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.060133934 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.065088034 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.065254927 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.070240021 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.090540886 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.095484018 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.095695972 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.100614071 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.122334957 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.128581047 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.128783941 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.134841919 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.174005032 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.178998947 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.179069042 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.183971882 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.240912914 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.245914936 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.246104002 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.251172066 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.274898052 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.280101061 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.280313969 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.285758972 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.306169033 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.311126947 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.311332941 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.316353083 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.322499037 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.327455044 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.327656031 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.334918022 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.382257938 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.387343884 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.387476921 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.392424107 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.399504900 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.404427052 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.404668093 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.409599066 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.416824102 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.421828985 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.422020912 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.426985979 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.467832088 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.472815037 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.472901106 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.477817059 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.497153997 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.502358913 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.502610922 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.609087944 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.669154882 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.732449055 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.786809921 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.787105083 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.787694931 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.787801981 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.787832022 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.787950993 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.788037062 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.788919926 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.792027950 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.810421944 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.815252066 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.815448046 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.820441961 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.837138891 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.842380047 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.842628002 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.847664118 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.874780893 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.880625010 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.880834103 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.886109114 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.926141024 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.931291103 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.931358099 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.936263084 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.962109089 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.967137098 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:35.967356920 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:35.972321987 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.000466108 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.005544901 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.005768061 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.010695934 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.034567118 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.039628983 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.039707899 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.044684887 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.074238062 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.079478025 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.079556942 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.084465027 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.109568119 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.114625931 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.114804029 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.119864941 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.158376932 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.163644075 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.163841963 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.168881893 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.205476999 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.212480068 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.212682009 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.217833042 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.265223026 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.270294905 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.270495892 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.276529074 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.292207003 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.297183990 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.297405958 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.302376032 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.322208881 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.327291965 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.327490091 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.332649946 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.362198114 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.367185116 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.367376089 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.508680105 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.573407888 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.624752045 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.624813080 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.625142097 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.625520945 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.625714064 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.641369104 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.646975040 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.647447109 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.652389050 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.667778015 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.672861099 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.673027992 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.678138018 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.716418028 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.721405983 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.721596003 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.726594925 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.761811972 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.766776085 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.766990900 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.772051096 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.793934107 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.798893929 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.799104929 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.804122925 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.824811935 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.829855919 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.830092907 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.835028887 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.855242014 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.860162973 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.860342026 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.865367889 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.883924961 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.888962984 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.889167070 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.894143105 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.920144081 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.925240040 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:36.925323963 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:36.930382967 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.017143965 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.017144918 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.023293972 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.023422003 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.023448944 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.076560020 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.078243971 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.081610918 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.083239079 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.083278894 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.083304882 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.083336115 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.122865915 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.122867107 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.127947092 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.127990961 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.128015995 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.128065109 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.128091097 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.154704094 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.159712076 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.159904003 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.164964914 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.199080944 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.204132080 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.204314947 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.209243059 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.226711035 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.231601954 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.233264923 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.238184929 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.260236979 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.265233994 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.265417099 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.270453930 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.325650930 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.330626965 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.330832005 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.335843086 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.387059927 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.392191887 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.392424107 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.398441076 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.416794062 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.422578096 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.422825098 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.430102110 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.449132919 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.465789080 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.466017008 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.473078966 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.479667902 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.487540960 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.487746954 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.494458914 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.511811018 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.519778967 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.520095110 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.527857065 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.541189909 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.546148062 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.546298981 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.551302910 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.571316004 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.578030109 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.578206062 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.584969044 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.605123043 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.612344027 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.612396002 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.619290113 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.662204027 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.667368889 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.667427063 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.672411919 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.684958935 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.692497969 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.692711115 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.698590994 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.714624882 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.720091105 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.720429897 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.726314068 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.751226902 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.756575108 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.756772041 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.761929035 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.776446104 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.781400919 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.781466007 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.786650896 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.805025101 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.810069084 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.810266972 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.815195084 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.838234901 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.843269110 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.843456030 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.849282026 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.872016907 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.877054930 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.877226114 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.883882999 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.904198885 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.909185886 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.909260035 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.914139986 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.949878931 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.954940081 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:37.955265045 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:37.960632086 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.010978937 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.016411066 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.016601086 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.022150993 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.042273045 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.050549984 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.050637007 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.061512947 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.072284937 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.083187103 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.083374023 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.097259045 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.106093884 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.121778011 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.121961117 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.136879921 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.137958050 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.139353037 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.144416094 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.145562887 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.146603107 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.150897980 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.171343088 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.178642988 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.178950071 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.187931061 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.235907078 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.243422031 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.243760109 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.248775959 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.260471106 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.266170979 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.270149946 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.276201010 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.298866034 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.304182053 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.306250095 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.311470032 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.337946892 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.342915058 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.343241930 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.348103046 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.371381044 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.376974106 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.377197027 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.382597923 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.400289059 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.405399084 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.405500889 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.410887957 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.437963009 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.464962006 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.465147018 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.476296902 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.476492882 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.482773066 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.493690014 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.499557018 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.499655962 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.504945993 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.533648968 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.538662910 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.538925886 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.543895006 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.567097902 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.571958065 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.572175026 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.577071905 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.588733912 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.594559908 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.594609976 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.599427938 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.624800920 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.625317097 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.629628897 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.629678965 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.634536028 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.669166088 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.674559116 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.679742098 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.679893970 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.684762955 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.698545933 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.703392982 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.703469038 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.708332062 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.730274916 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.735136032 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.735340118 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.740212917 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.766179085 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.769612074 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.774586916 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.777930021 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.778012037 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.782721996 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.782810926 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.782979012 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.787878990 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.810112953 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.815001965 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.815231085 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.820064068 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.838702917 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.843538046 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.843667984 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.848515034 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.871862888 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.876745939 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.876969099 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.881942987 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.906610966 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.911468029 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.911734104 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.916614056 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.935204029 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.940185070 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.942270994 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.947124958 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.962918043 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.967802048 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:38.970256090 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:38.975095987 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.001895905 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.006974936 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.007159948 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.012057066 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.025048018 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.029902935 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.030117989 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.034936905 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.056579113 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.061489105 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.061702967 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.066520929 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.091469049 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.096513033 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.096698999 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.103348017 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.118520975 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.123414040 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.123492956 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.128360987 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.134350061 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.140005112 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.140197992 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.145634890 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.169686079 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.174573898 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.174746037 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.179600000 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.200244904 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.205172062 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.205336094 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.210186958 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.227077007 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.232095957 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.232299089 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.237201929 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.261632919 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.266489029 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.266693115 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.325778961 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.402806997 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.479489088 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.575447083 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.656764984 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.656830072 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.656830072 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.657114029 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.657171965 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.657623053 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.657638073 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.657710075 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.657991886 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.658010006 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.658293962 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.658307076 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.661710024 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.661801100 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.661847115 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.661992073 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.662111044 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.662570953 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.662636042 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.666881084 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.703217983 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.708228111 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.708439112 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.713392973 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.744698048 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.749629021 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.749838114 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.754776001 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.775417089 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.780262947 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.780467033 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.785379887 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.804734945 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.809645891 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.809824944 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.814738989 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.821582079 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.826493025 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.826680899 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.831587076 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.835793972 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.840701103 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.840909958 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.845813990 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.854924917 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.860131979 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.860203028 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.865748882 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.887058973 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.892011881 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.892179966 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.897102118 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.918572903 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.923381090 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.923425913 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.928585052 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.950256109 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.955156088 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.955241919 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.960089922 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.980032921 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.984976053 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:39.985054970 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:39.989974022 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.010334015 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.015306950 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.015479088 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.020384073 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.077007055 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.081976891 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.082067966 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.086985111 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.121182919 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.126368046 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.126578093 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.131644964 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.153489113 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.162429094 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.162614107 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.167645931 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.183612108 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.188779116 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.189085007 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.194013119 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.211957932 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.217243910 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.217308998 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.222383976 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.249876976 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.254914045 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.255079985 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.260158062 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.296448946 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.301340103 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.301539898 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.306405067 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.325048923 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.330014944 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.330254078 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.335110903 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.358156919 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.363826036 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.364042044 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.368937016 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.407248974 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.412391901 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.412594080 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.418046951 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.434860945 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.471992970 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.472359896 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.477340937 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.480726004 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.485711098 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.485785007 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.490838051 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.509699106 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.514624119 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.514828920 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.520015001 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.543246031 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.548227072 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.548445940 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.553350925 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.574482918 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.579428911 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.579514980 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.584449053 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.605432034 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.610452890 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.610656023 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.615530014 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.636583090 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.641633034 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.641814947 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.647738934 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.666889906 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.671772957 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.671952963 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.676851034 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.700829029 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.705876112 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.706142902 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.711438894 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.768037081 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.773663044 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.773758888 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.778935909 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.804888010 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.809802055 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.809883118 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.814783096 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.836663008 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.841892958 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.842046976 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.846971989 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.870670080 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.875756979 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.875962973 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.881124973 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.920917034 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.925945997 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.926181078 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.931442976 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.955066919 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.960227013 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.960433006 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.965385914 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.976757050 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.981709957 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:40.981906891 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:40.986979961 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.012748957 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.018012047 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.018094063 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.022967100 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.076534986 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.081830025 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.082083941 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.087095976 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.102637053 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.108453035 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.108537912 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.113622904 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.133102894 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.138964891 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.139048100 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.144279957 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.167468071 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.172539949 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.172763109 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.177818060 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.197870016 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.202821970 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.203006983 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.208022118 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.229593039 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.234764099 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.234997988 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.239968061 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.260538101 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.269035101 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.269162893 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.274300098 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.291941881 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.297220945 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.297431946 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.302532911 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.327774048 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.332815886 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.333165884 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.338248014 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.353537083 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.358828068 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.358923912 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.363836050 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.390392065 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.395781040 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.395982027 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.401020050 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.440962076 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.461323023 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.461549044 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.466517925 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.480042934 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.485022068 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.485203981 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.490184069 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.528661966 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.534043074 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.534231901 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.539169073 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.556685925 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.562007904 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.562211037 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.567327023 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.588413000 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.593379021 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.593502998 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.599123955 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.618194103 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.623403072 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.623497963 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.628674984 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.649879932 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.655266047 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.655467033 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.660547018 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.681354046 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.686322927 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.686480999 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.691447973 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.712105989 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.717071056 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.717195988 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.722111940 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.760179043 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.765225887 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.765420914 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.770626068 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.793059111 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.798278093 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.798373938 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.803433895 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.828560114 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.833947897 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.834033966 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.839463949 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.877800941 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.882965088 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.883182049 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.888084888 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.904239893 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.909548998 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.909638882 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.914608955 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.935190916 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.940697908 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.940891981 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.945837975 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.981034040 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.986046076 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:41.986310005 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:41.991745949 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.012607098 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.017606974 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.017688990 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.022593975 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.056811094 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.062000036 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.062187910 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.067123890 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.094719887 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.099772930 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.099961042 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.104996920 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.134196043 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.139744997 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.139930010 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.144999981 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.164331913 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.195769072 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.242685080 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.274255991 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.322565079 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.404361010 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.404447079 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.404457092 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.404678106 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.404726982 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.404948950 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.404974937 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.405000925 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.405065060 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.405092001 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.409343958 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.441795111 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.448271036 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.448502064 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.455272913 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.469434023 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.474451065 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.474776983 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.479645967 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.509358883 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.514473915 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.514674902 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.519692898 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.539853096 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.545186043 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.545248985 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.550164938 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.576921940 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.582029104 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.582258940 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.587338924 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.606360912 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.611324072 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.611681938 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.616684914 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.635740995 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.640916109 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.641139984 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.646505117 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.667023897 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.671978951 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.672178030 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.678047895 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.697962046 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.703114033 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.703283072 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.708178043 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.727216959 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.732397079 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.732641935 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.738188028 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.761352062 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.766401052 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.766657114 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.771931887 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.840682030 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.840682030 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.845700979 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.845748901 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.845841885 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.885675907 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.885675907 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:42.890810013 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.890839100 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.890866041 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.890892029 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.923937082 CEST	6606	49798	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:42.924171925 CEST	49798	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:49.325908899 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:49.331188917 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:49.331315041 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:49.336265087 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:50.087441921 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:50.137989998 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:50.227621078 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:50.228440046 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:50.233285904 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:50.233352900 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:50.238274097 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:59.357398987 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:59.403670073 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:13:59.501605988 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:13:59.544092894 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:14:00.513266087 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:14:00.518389940 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:14:00.518630981 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:14:00.523560047 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:14:00.785893917 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:14:00.841078043 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:14:00.926487923 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:14:00.927468061 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:14:00.932430029 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:14:00.932667017 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:14:00.937599897 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:14:06.522972107 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:14:06.528352976 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:14:06.530046940 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:14:06.535002947 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:14:06.793736935 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:14:06.841110945 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:14:06.935636997 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:14:06.937880993 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:14:06.942866087 CEST	6606	49730	46.253.4.252	192.168.2.4
Oct 15, 2024 23:14:06.946171045 CEST	49730	6606	192.168.2.4	46.253.4.252
Oct 15, 2024 23:14:06.951133013 CEST	6606	49730	46.253.4.252	192.168.2.4

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 15, 2024 23:12:06.565205097 CEST	1.1.1.1	192.168.2.4	0x1463	No error (0)	windowsupdatebg.s.llnwi.net		178.79.238.0	A (IP address)	IN (0x0001)	false

Target ID:	0
Start time:	17:11:59
Start date:	15/10/2024
Path:	C:\Users\user\Desktop\jAjWw92QKR.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\jAjWw92QKR.exe"
Imagebase:	0x710000
File size:	48'640 bytes
MD5 hash:	24C5C45311482C0F967BD93942FCFA01
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000000.00000002.2955367887.0000000005075000.00000004.00000020.00020000.00000000.sdmp, Author: ditekSHen Rule: JoeSecurity_AsyncRAT, Description: Yara detected AsyncRAT, Source: 00000000.00000000.1701128846.0000000000712000.00000002.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: INDICATOR_SUSPICIOUS_EXE_ASEP_REG_Reverse, Description: Detects file containing reversed ASEP Autorun registry keys, Source: 00000000.00000000.1701128846.0000000000712000.00000002.00000001.01000000.00000003.sdmp, Author: ditekSHen Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000000.00000002.2957735676.0000000006BD0000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000000.00000002.2945450344.0000000000E1A000.00000004.00000020.00020000.00000000.sdmp, Author: ditekSHen Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000000.00000002.2945450344.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp, Author: ditekSHen Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000000.00000002.2946371088.0000000002ABA000.00000004.00000800.00020000.00000000.sdmp, Author: ditekSHen Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000000.00000002.2954308452.0000000003A87000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AsyncRAT, Description: Yara detected AsyncRAT, Source: 00000000.00000002.2946371088.0000000002A81000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000000.00000002.2946371088.0000000002A81000.00000004.00000800.00020000.00000000.sdmp, Author: ditekSHen
Reputation:	low
Has exited:	false

Show Windows behavior

Function 0712E0C0 Relevance: 22.2, Strings: 17, Instructions: 952COMMON

Download Yara Rule

Strings

4c^q, xrefs: 0712E3DF
c^q, xrefs: 0712EA2A
4c^q, xrefs: 0712E3D5
|b_q, xrefs: 0712E4EB
$^q, xrefs: 0712ECE6
hfq, xrefs: 0712E367
|b_q, xrefs: 0712E4E1
|b_q, xrefs: 0712E4A6
$^q, xrefs: 0712ECF8
$fq, xrefs: 0712E32A
c^q, xrefs: 0712EA20
c^q, xrefs: 0712EA0E
$^q, xrefs: 0712ED04
hfq, xrefs: 0712E3A2
c^q, xrefs: 0712E58D
hfq, xrefs: 0712E3AC
`]cq, xrefs: 0712EDC6

Memory Dump Source

Source File: 00000000.00000002.2958319123.0000000007110000.00000040.00000800.00020000.00000000.sdmp, Offset: 07110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7110000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: $fq$4c^q$4c^q$`]cq$hfq$hfq$hfq$|b_q$|b_q$|b_q$$^q$$^q$$^q$c^q$c^q$c^q$c^q
API String ID: 0-362901584
Opcode ID: b3d4a3678ae81d9293d51193fd2510d196696da47b9c8475d56355d244d1d4b5
Instruction ID: 31e0b0a44dc51862cb892c7e389bb65428494f64e340f67ac48b47e246b20568
Opcode Fuzzy Hash: b3d4a3678ae81d9293d51193fd2510d196696da47b9c8475d56355d244d1d4b5
Instruction Fuzzy Hash: A7923D74A002158FCB25DF29C958A69BBF2FF89310F1585A9D44ADB3A1DB31DC86CF11

Function 00F1A330 Relevance: 11.9, Strings: 9, Instructions: 646COMMON

Download Yara Rule

Strings

X=, xrefs: 00F1A940
X=, xrefs: 00F1A92F
~, xrefs: 00F1A46B
~, xrefs: 00F1A3AD
~, xrefs: 00F1A4EA
~, xrefs: 00F1A4CE
~, xrefs: 00F1A74B
~, xrefs: 00F1A4AD
~, xrefs: 00F1A486

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: X=$X=$~$~$~$~$~$~$~
API String ID: 0-3010316338
Opcode ID: 291645d7ddbc7edc4adac272f1827540c24872a43df66d6224d8b6c5c6e06df3
Instruction ID: b5ec6c43b2fa97f2afa67f002261642beb9fb2633b3841803d405acab611c2ab
Opcode Fuzzy Hash: 291645d7ddbc7edc4adac272f1827540c24872a43df66d6224d8b6c5c6e06df3
Instruction Fuzzy Hash: FB42AD30B01244CFD705DF69C994AAABBF2BF88310F1484A9E446DB3A6DB35EC85DB51

Function 00F19BD0 Relevance: 11.7, Strings: 9, Instructions: 458COMMON

Download Yara Rule

Strings

$|, xrefs: 00F19D2F
$|, xrefs: 00F19F6E
~, xrefs: 00F1A159
$|, xrefs: 00F19EAE
$|, xrefs: 00F19CC1
$|, xrefs: 00F19FAE
$|, xrefs: 00F19E69
$|, xrefs: 00F19D47
$|, xrefs: 00F19CE1

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: $|$$|$$|$$|$$|$$|$$|$$|$~
API String ID: 0-438758050
Opcode ID: 19985a92ea1b77b3055e04d58121c5088d083a4eff0112c19a5195c552ae23a0
Instruction ID: 95dfbf7b4644f43437bcd072c7cf04e834f3abfc6208b29d0c0499ed1be23581
Opcode Fuzzy Hash: 19985a92ea1b77b3055e04d58121c5088d083a4eff0112c19a5195c552ae23a0
Instruction Fuzzy Hash: E6126C74A042458FC705DF68C594AAEBBF2FF89310B19C5A9E449DB366C730ED85CBA0

Function 00F15C00 Relevance: 8.3, Strings: 6, Instructions: 788COMMON

Download Yara Rule

Strings

<, xrefs: 00F16050
~, xrefs: 00F15F98
<, xrefs: 00F160BC
X=, xrefs: 00F161C3
~, xrefs: 00F15FD1
X=, xrefs: 00F161AD

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: <$<$X=$X=$~$~
API String ID: 0-3246044631
Opcode ID: cec8588825ec4d8266b299e72fe0e2028f545f78276633d535eb22c3d4cadd65
Instruction ID: a24ac405878295e539535906438a6f0fdc76f348aa2945d86c7571bcdaeeb3f4
Opcode Fuzzy Hash: cec8588825ec4d8266b299e72fe0e2028f545f78276633d535eb22c3d4cadd65
Instruction Fuzzy Hash: 22621970A00249DFDB15DFA8C994AADBBB2FF88310F148569E805EB365DB35ED81CB50

Function 028AC478 Relevance: 8.2, Strings: 6, Instructions: 720COMMON

Download Yara Rule

Strings

xbaq, xrefs: 028AC4D9
TJcq, xrefs: 028AC501
4'^q, xrefs: 028ACACD
pbq, xrefs: 028ACB0C
LIZh, xrefs: 028AC732
Te^q, xrefs: 028AC8A0

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: 4'^q$LIZh$TJcq$Te^q$pbq$xbaq
API String ID: 0-2176507992
Opcode ID: 4967432a16d4ba78369e77b031f6df2bf895b08e2d6ada080f889a9d2dd6ecdc
Instruction ID: 08323a5526732510837d5fafd1d39b4011479686b87e90f1d97003ec26e83b82
Opcode Fuzzy Hash: 4967432a16d4ba78369e77b031f6df2bf895b08e2d6ada080f889a9d2dd6ecdc
Instruction Fuzzy Hash: FC521479A006149FDB15CF68C994AA9BBB2FF48304F1581A9E509EB276DB31EC52CF40

Function 028AC3A0 Relevance: 6.6, Strings: 5, Instructions: 363COMMON

Download Yara Rule

Strings

xbaq, xrefs: 028AC4D9
TJcq, xrefs: 028AC501
LIZh, xrefs: 028AC732
+k!p^, xrefs: 028AC44E
Te^q, xrefs: 028AC8A0

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: LIZh$TJcq$Te^q$xbaq$+k!p^
API String ID: 0-1355406319
Opcode ID: 5220e50b01280939cdc1ab086a6b30ebc0207015079a1033ad542c4a88c6b96b
Instruction ID: 1a018a50dd0341865bad3761949f70488e5c5868cb20c24050e2e078292715a8
Opcode Fuzzy Hash: 5220e50b01280939cdc1ab086a6b30ebc0207015079a1033ad542c4a88c6b96b
Instruction Fuzzy Hash: C5E15D79A006199FDB14DF68C994BADBBF2FF48304F1581AAE449EB365DB309C45CB40

Function 028AC468 Relevance: 5.3, Strings: 4, Instructions: 319COMMON

Download Yara Rule

Strings

xbaq, xrefs: 028AC4D9
TJcq, xrefs: 028AC501
LIZh, xrefs: 028AC732
Te^q, xrefs: 028AC8A0

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: LIZh$TJcq$Te^q$xbaq
API String ID: 0-342418364
Opcode ID: ea81f50ff803df1cacb481939b37a74f57af786e38858f52109192939cc898e4
Instruction ID: 07a64e9dd75241db465bd1379f9e6fed9c74513b641d7f2ff77d18ac80f01760
Opcode Fuzzy Hash: ea81f50ff803df1cacb481939b37a74f57af786e38858f52109192939cc898e4
Instruction Fuzzy Hash: CAD13979A106299FDB14DF68C994BADBBF2BF48300F1581A9E409EB365DB30AD45CF40

Function 028A5CF0 Relevance: 2.8, Strings: 2, Instructions: 281COMMON

Download Yara Rule

Strings

Lv>], xrefs: 028A5D0F
Lv>], xrefs: 028A5D2F

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Lv>]$Lv>]
API String ID: 0-490534171
Opcode ID: 6063d31b99d18d03416eea133fad865e9f6c25365a7a46cd79c3895be03f8e19
Instruction ID: e144a6fc7d3999c852a2de5bce9a46758ceb455d7ce5a06d67e2b460af195d18
Opcode Fuzzy Hash: 6063d31b99d18d03416eea133fad865e9f6c25365a7a46cd79c3895be03f8e19
Instruction Fuzzy Hash: 08B132B8E00219CFEF14CFA9C99579DBBF2AF48314F548129D419E7254EB789885CF81

Function 028A65C0 Relevance: 2.8, Strings: 2, Instructions: 266COMMON

Download Yara Rule

Strings

Lv>], xrefs: 028A65FF
Lv>], xrefs: 028A65DF

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Lv>]$Lv>]
API String ID: 0-490534171
Opcode ID: 1be00b35e52bde6582e93aa72518935fbce7cfe5a7fa60808dec58c0ca413bac
Instruction ID: fcf5a386562785f5d475a9d5901badd93d84cde42e0f5bcd0309d6b535f1877d
Opcode Fuzzy Hash: 1be00b35e52bde6582e93aa72518935fbce7cfe5a7fa60808dec58c0ca413bac
Instruction Fuzzy Hash: D5B14CB8E10219CFEF10CFA9D89579DBBF6AF48314F188129D419E7258FB749845CB81

Function 028AC108 Relevance: 2.7, Strings: 2, Instructions: 153COMMON

Download Yara Rule

Strings

4'^q, xrefs: 028AC1E7
4'^q, xrefs: 028AC1BC

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: 4'^q$4'^q
API String ID: 0-2697143702
Opcode ID: d639a8d8fdb658443c943b5b535332db5f6d80cf3a5fc9881e242df594d20fe7
Instruction ID: c3aef4d42cb35638e2c5572a138c1059b63d24b65bd33b2b17889029d87de9f4
Opcode Fuzzy Hash: d639a8d8fdb658443c943b5b535332db5f6d80cf3a5fc9881e242df594d20fe7
Instruction Fuzzy Hash: 9D511CB0A102098FD708EF7EE9956AABFF3FBC8200B14D579D0049B268DF365546CB65

Function 028AC118 Relevance: 2.6, Strings: 2, Instructions: 150COMMON

Download Yara Rule

Strings

4'^q, xrefs: 028AC1E7
4'^q, xrefs: 028AC1BC

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: 4'^q$4'^q
API String ID: 0-2697143702
Opcode ID: 530c93fce7c05dde0e2020d8fef84e3f60096d89321416f77f474a51b14af878
Instruction ID: 18ce79e1dfc890fd95428391b446331a6629942f971887366f2af79b8cf5bf39
Opcode Fuzzy Hash: 530c93fce7c05dde0e2020d8fef84e3f60096d89321416f77f474a51b14af878
Instruction Fuzzy Hash: B2510BB0A102098FD708EF7EE9956AABFE3FBC8200B14D579D0049B268DF365546CB65

Function 00F17478 Relevance: .4, Instructions: 406COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7dc5d5ef074829ca2b737b3dd1408050c668ea6b4e8a49a0c7eb4c5f6dde98e1
Instruction ID: 3fc7c1139dd846bfeab007ff80cac940ecd8389a14e14142f461e8b4ada562ea
Opcode Fuzzy Hash: 7dc5d5ef074829ca2b737b3dd1408050c668ea6b4e8a49a0c7eb4c5f6dde98e1
Instruction Fuzzy Hash: 2B029A35A04705CFCB25DF69C984AAABBF2FF48320F148569E44A9B761D734EC85EB40

Function 00F1BAF0 Relevance: 6.7, Strings: 5, Instructions: 425COMMON

Download Yara Rule

Strings

Hb_q, xrefs: 00F1BB53
~, xrefs: 00F1BC00
~, xrefs: 00F1BB2A
<, xrefs: 00F1BB78
~, xrefs: 00F1BB44

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: <$Hb_q$~$~$~
API String ID: 0-2543107357
Opcode ID: c5eb058d517170780dd0a70d6f979b4b7a147d01a330463cee51827e71141ef4
Instruction ID: f1ddcb3775fd8d50c1739dbb002b078c723c59639889fb0b4174db9d1f962439
Opcode Fuzzy Hash: c5eb058d517170780dd0a70d6f979b4b7a147d01a330463cee51827e71141ef4
Instruction Fuzzy Hash: 27025B75A04209DFCB05CFA8C48499EBBF2FF89310B1585A9E405AB366DB34ED85CB90

Function 028A1727 Relevance: 5.4, Strings: 4, Instructions: 442COMMON

Download Yara Rule

Strings

a^q, xrefs: 028A1CDF
xbq, xrefs: 028A1D76
a^q, xrefs: 028A1D3C
,, xrefs: 028A1870

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: a^q$ a^q$,$xbq
API String ID: 0-2180861429
Opcode ID: 4847abb3fa2f3326c1e52e024b76e7dae2d22676acf2b7fbd7a293093e26e947
Instruction ID: f3dadc943af6ed25f3469590e883c144072377f82d5c5eb4f3f7de25f467cf07
Opcode Fuzzy Hash: 4847abb3fa2f3326c1e52e024b76e7dae2d22676acf2b7fbd7a293093e26e947
Instruction Fuzzy Hash: 6D028E387002058FDB15EF28D464B6E7BE2FB84714F248968E4499F3A9DF75AC46CB81

Function 028A5CE4 Relevance: 4.0, Strings: 3, Instructions: 278COMMON

Download Yara Rule

Strings

V, xrefs: 028A5D53
Lv>], xrefs: 028A5D0F
Lv>], xrefs: 028A5D2F

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Lv>]$Lv>]$V
API String ID: 0-1457051565
Opcode ID: 5074006278da57f45e3a042b6b1cfb9ccfe6bc40c4461625c4582e559051ec99
Instruction ID: 8264207f3f48cf6ac7235ab2a020644efc319bb4c396bead118b77fd98ec32fc
Opcode Fuzzy Hash: 5074006278da57f45e3a042b6b1cfb9ccfe6bc40c4461625c4582e559051ec99
Instruction Fuzzy Hash: A7B13FB8E00219CFEF10CFA9C99579DBBF1AF48318F548129D819E7254EB789885CF91

Function 028A1962 Relevance: 3.9, Strings: 3, Instructions: 183COMMON

Download Yara Rule

Strings

a^q, xrefs: 028A1CDF
xbq, xrefs: 028A1D76
a^q, xrefs: 028A1D3C

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: a^q$ a^q$xbq
API String ID: 0-2081302502
Opcode ID: 64cd4197a5ed18b69a6d6c4d8ccb745036a3083cba357f4a151a2f17b7a4038c
Instruction ID: 1d6d6b80a917a5d5ef45986d5d2d6e0f17a143a24f02ebd44027b3de066c6fad
Opcode Fuzzy Hash: 64cd4197a5ed18b69a6d6c4d8ccb745036a3083cba357f4a151a2f17b7a4038c
Instruction Fuzzy Hash: 07615B787002008FD715AF28D464B5A7BE2FB84714F208968E549DF3A9DFB5ED468B81

Function 028A0EBA Relevance: 3.9, Strings: 3, Instructions: 162COMMON

Download Yara Rule

Strings

d7p, xrefs: 028A0F05
Te^q, xrefs: 028A0EED
(bq, xrefs: 028A1192

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: (bq$Te^q$d7p
API String ID: 0-1699803613
Opcode ID: 4a3f91a4e132e7d56b7ee20e3c4b6e5ece33f4a2a7e9aaaa716398a71650e00d
Instruction ID: e04ae4fc208efb63e6f12d6b325c6f697d3754fc21721562f5cca2429428ab73
Opcode Fuzzy Hash: 4a3f91a4e132e7d56b7ee20e3c4b6e5ece33f4a2a7e9aaaa716398a71650e00d
Instruction Fuzzy Hash: 20517C34B002148FDB54DF69C4A8A5EBBF6FF89710F2581A9E445DB3A5CA79DC01CB90

Function 00F1D0D0 Relevance: 2.9, Strings: 2, Instructions: 405COMMON

Download Yara Rule

Strings

,bq, xrefs: 00F1D481
,bq, xrefs: 00F1D495

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: ,bq$,bq
API String ID: 0-2699258169
Opcode ID: 3edf9b678edf0adfac465029d8beeb40c30195489baa4b478a719cebc311b7e9
Instruction ID: ffa2490b8eb0f30c4a3264df7f9e73267b566447eacd3890102d2bec787afee3
Opcode Fuzzy Hash: 3edf9b678edf0adfac465029d8beeb40c30195489baa4b478a719cebc311b7e9
Instruction Fuzzy Hash: F6E14934B501118FCB04DF3EC998A6AB7F7AF8876471580A9E506CB375EE71EC429B90

Function 00F18008 Relevance: 2.8, Strings: 2, Instructions: 274COMMON

Download Yara Rule

Strings

~, xrefs: 00F18214
~, xrefs: 00F18126

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: ~$~
API String ID: 0-3661683218
Opcode ID: 17cca9ff01d3077a767b5e022bf676fc5ed121adaaafe6cb1b9c53b1ca5112f6
Instruction ID: ddc5cfc0efdbb579f261c097fa07d6beaaa5c9ed23d213e539c6b26e74db2320
Opcode Fuzzy Hash: 17cca9ff01d3077a767b5e022bf676fc5ed121adaaafe6cb1b9c53b1ca5112f6
Instruction Fuzzy Hash: 99B17031A04740CFD721CB25C684BA5BBE2FF513A4F4884A9D4898B6A2DB75ECC6DB50

Function 028A65B6 Relevance: 2.8, Strings: 2, Instructions: 258COMMON

Download Yara Rule

Strings

Lv>], xrefs: 028A65FF
Lv>], xrefs: 028A65DF

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Lv>]$Lv>]
API String ID: 0-490534171
Opcode ID: f276f8585bce731082ba07c57549a717a8151a5ba41bb3ecee45ed43847dcc5e
Instruction ID: 22a10ddb3e1093919c933c0a6a6634e485142e37646e55f1173566d0723f8e70
Opcode Fuzzy Hash: f276f8585bce731082ba07c57549a717a8151a5ba41bb3ecee45ed43847dcc5e
Instruction Fuzzy Hash: 42A14AB8E10229CFEF10CFA8D99579DBBF5AF48314F188129D819E7258EB749845CF81

Function 028A9EE0 Relevance: 2.7, Strings: 2, Instructions: 213COMMON

Download Yara Rule

Strings

+, xrefs: 028AA0FE
xbq, xrefs: 028AA226

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: xbq$+
API String ID: 0-3688029685
Opcode ID: 56a9988071bab685088cb08f3bba87f99ca98a1d869e1c659fc48db08becd84e
Instruction ID: b7c89be140386f3f14f7f261bf00033f6630df168fe9e9966693972821eea58f
Opcode Fuzzy Hash: 56a9988071bab685088cb08f3bba87f99ca98a1d869e1c659fc48db08becd84e
Instruction Fuzzy Hash: 16915A7C5012208FE738CF28E4643153BB1F745718F24451AD8CDDBA9ADBBA9A45CF92

Function 00F1A188 Relevance: 2.6, Strings: 2, Instructions: 149COMMON

Download Yara Rule

Strings

~, xrefs: 00F1A21F
@, xrefs: 00F1A2F2

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: @$~
API String ID: 0-1280834954
Opcode ID: 3485f1745932fd3bd0f5cf9933989429e5536022dff12df44995c9dd88e00884
Instruction ID: 540448ee3cea4d543fd83ac36bdfd5e96d47b30fd0b6c065ae91697b8de6e3af
Opcode Fuzzy Hash: 3485f1745932fd3bd0f5cf9933989429e5536022dff12df44995c9dd88e00884
Instruction Fuzzy Hash: A0515D71A012599FDB15CFA9C884AEEBBF1FF88310F14846AE815EB261D731DD84DB90

Function 028A0D20 Relevance: 2.6, Strings: 2, Instructions: 133COMMON

Download Yara Rule

Strings

dLdq, xrefs: 028A0D5B
Hbq, xrefs: 028A0E40

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Hbq$dLdq
API String ID: 0-411705877
Opcode ID: 98f0dba5b417724a667c24ded12b7cd027ea3bcb0bc9c14a1672a132e9b4a81b
Instruction ID: 332f56bfe5461aec3d9ac1fcc17f70aec9308eb50e62961318cf8850c8003c02
Opcode Fuzzy Hash: 98f0dba5b417724a667c24ded12b7cd027ea3bcb0bc9c14a1672a132e9b4a81b
Instruction Fuzzy Hash: 0241D0397042048FDB159F68C464BAEBFF6FF89200F1445AAE445DB3A1CB35AC05CB90

Function 0712B190 Relevance: 2.6, Strings: 2, Instructions: 118COMMON

Download Yara Rule

Strings

xU, xrefs: 0712B217
Lj, xrefs: 0712B1AE

Memory Dump Source

Source File: 00000000.00000002.2958319123.0000000007110000.00000040.00000800.00020000.00000000.sdmp, Offset: 07110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7110000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Lj$xU
API String ID: 0-127202121
Opcode ID: 737836d9ed44ec94a336380a7e9af35f793036494b3d0d6641e32c4c5bd11e7d
Instruction ID: 21beff3565a5f8311893d2d57626cadcbeaf2e246e92ac799fb85510b143c944
Opcode Fuzzy Hash: 737836d9ed44ec94a336380a7e9af35f793036494b3d0d6641e32c4c5bd11e7d
Instruction Fuzzy Hash: AC414F313007019FC715EB75D95465EBBE2FBC8320B008A3DD0468B768DF75E94A8BA1

Function 028A9278 Relevance: 2.6, Strings: 2, Instructions: 111COMMON

Download Yara Rule

Strings

$^q, xrefs: 028A92AD
$^q, xrefs: 028A92B7

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: $^q$$^q
API String ID: 0-355816377
Opcode ID: 294ca5f062c5e6315f917d60bf131e542bdada9fff1ae51aa1f32ca53ed69cee
Instruction ID: 5b05d07ad042f99d9bf029fe1b8bcf45e20ea2829e93ac6c66bf2eaafb27a52b
Opcode Fuzzy Hash: 294ca5f062c5e6315f917d60bf131e542bdada9fff1ae51aa1f32ca53ed69cee
Instruction Fuzzy Hash: 6A413D78B0C509DBD7285F5A90A852DBBB6BF847057389899F006CB398CF329C57CB85

Function 028A9180 Relevance: 2.6, Strings: 2, Instructions: 69COMMON

Download Yara Rule

Strings

Te^q, xrefs: 028A91AA
H, xrefs: 028A9189

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: H$Te^q
API String ID: 0-1874919464
Opcode ID: fa4b9356c68894385ed021371d9e33445cf5d298370fd2791d2048c50ff4076e
Instruction ID: 0a3ba6e2e703e46f306ab29d4c191c22defa03cc6ba46ef9cd5cb6e1b292728d
Opcode Fuzzy Hash: fa4b9356c68894385ed021371d9e33445cf5d298370fd2791d2048c50ff4076e
Instruction Fuzzy Hash: 89218039B141148FEB44DF68C468BAE7BF6AF88714F158069E506DB3A1DFB98C04CB91

Function 028AF038 Relevance: 2.6, Strings: 2, Instructions: 63COMMON

Download Yara Rule

Strings

~, xrefs: 028AF07A
~, xrefs: 028AF0B6

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: ~$~
API String ID: 0-3661683218
Opcode ID: 47d25512997b125b50b49c9d7226571ad0cfb70fed611474b8b0d678cc0cb5a2
Instruction ID: f6a2c7590d9ff8d3b5fd3eaf93be99d306dceac6dcb05b35c64f6b829c5299ee
Opcode Fuzzy Hash: 47d25512997b125b50b49c9d7226571ad0cfb70fed611474b8b0d678cc0cb5a2
Instruction Fuzzy Hash: 4B11E576B402245FD325DA699C41B2BB7D5DBC8764F10453AEA09DB3A0DF71EC0187E0

Function 028AEB57 Relevance: 1.7, Strings: 1, Instructions: 407COMMON

Download Yara Rule

Strings

~, xrefs: 028AEC47

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: ~
API String ID: 0-2493274609
Opcode ID: 7fb8aaabc81169948ebe55d5e4c9b887394db3438c07949f421a3a6441d0be6b
Instruction ID: 9c2bd92db79db0df507eb2630da0e4cfd9e402b0ed162c6f5ad22852576838ca
Opcode Fuzzy Hash: 7fb8aaabc81169948ebe55d5e4c9b887394db3438c07949f421a3a6441d0be6b
Instruction Fuzzy Hash: 2DF15B397106048FDB55DF29C899A6ABBF2FF85214F1888A9E546CB371CB34EC40CB51

Function 028AE6C8 Relevance: 1.5, Strings: 1, Instructions: 249COMMON

Download Yara Rule

Strings

,bq, xrefs: 028AE953

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: ,bq
API String ID: 0-2474004448
Opcode ID: eb9cf5b6909fe7f6f9295ef118a0ce1fa9bdf9e3018cd8c80070c2afedf618a0
Instruction ID: 03621a4e4cab1ebc4164c6ea4bca50e9a35ff2a3681d874f310657171e69d17a
Opcode Fuzzy Hash: eb9cf5b6909fe7f6f9295ef118a0ce1fa9bdf9e3018cd8c80070c2afedf618a0
Instruction Fuzzy Hash: 7EA14F38B002098FDB14DFA5C554A9EBBB2BF88704F148569D90ADB368DF71ED46CB90

Function 028A2DA8 Relevance: 1.5, Strings: 1, Instructions: 244COMMON

Download Yara Rule

Strings

p q, xrefs: 028A2DD8

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: p q
API String ID: 0-423023690
Opcode ID: 363cd5b1733130745c9a40a6d8be1bb1113721cff5a5a488977084046863507f
Instruction ID: 93614224b959372d04b6e319c78efde1d7c381e0d035a397f01f6d5710e7efb7
Opcode Fuzzy Hash: 363cd5b1733130745c9a40a6d8be1bb1113721cff5a5a488977084046863507f
Instruction Fuzzy Hash: 8991BF35A002058FDB25DF68C49069EBBF2FF84314F1485A9D859EB359DB31ED86CB90

Function 06D2ECD0 Relevance: 1.5, Strings: 1, Instructions: 233COMMON

Download Yara Rule

Strings

Deq, xrefs: 06D2ED5F

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Deq
API String ID: 0-948982800
Opcode ID: 17b864be06ae96a7d773ccc1e5c8631acbe59bbc8348ff8a7d62404984ef3ca3
Instruction ID: 0c71c97cc914ae2219c3e5126798af20a4ecf2673f14c91f58ffb6813720b1c3
Opcode Fuzzy Hash: 17b864be06ae96a7d773ccc1e5c8631acbe59bbc8348ff8a7d62404984ef3ca3
Instruction Fuzzy Hash: 4781C170A002158FCB55EF29D594A6ABBF2FF89310F2485A9E405DB3A5DF31EC02CB91

Function 00C13E08 Relevance: 1.5, Strings: 1, Instructions: 232COMMON

Download Yara Rule

Strings

Hbq, xrefs: 00C141EE

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Hbq
API String ID: 0-1245868
Opcode ID: ccd6d2fa060bdb1f642ce87e7d8a87623d03552641b06b4e04f96cc0aa465fbd
Instruction ID: c49d30cb31637dfdb0a4f13cdba5aea7c3508727cae215ee5e3d06ce999d95a2
Opcode Fuzzy Hash: ccd6d2fa060bdb1f642ce87e7d8a87623d03552641b06b4e04f96cc0aa465fbd
Instruction Fuzzy Hash: 7A9178302407218FC325EF38D41855EBAB6FB85324B510A2CD9979F764DFBAED458B81

Function 06D2AB5E Relevance: 1.5, Strings: 1, Instructions: 230COMMON

Download Yara Rule

Strings

sT, xrefs: 06D2AD24

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: sT
API String ID: 0-2351246148
Opcode ID: 405dbeddb5f46123c6e1b67e7fd4d92951e87dba110b3659ee4b2153210b09fc
Instruction ID: b8f3533eb326a38f03c52a2f325db1d239589abf692e750f7ecc856051bf2dba
Opcode Fuzzy Hash: 405dbeddb5f46123c6e1b67e7fd4d92951e87dba110b3659ee4b2153210b09fc
Instruction Fuzzy Hash: 1D918D397001228FD351EB28D594B6D77F3FFD9214F69C1A4D506AB388CE78AC468B91

Function 00C13DF8 Relevance: 1.5, Strings: 1, Instructions: 225COMMON

Download Yara Rule

Strings

Hbq, xrefs: 00C141EE

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Hbq
API String ID: 0-1245868
Opcode ID: 84b2fc48ce1f9b88fe0018f18fa80093a8adfccfbe54097ab41e08f49bd46f2f
Instruction ID: 4e5c0e8935364c23da73783d5bd63a8a7023e08abc1cc602139470c95c900392
Opcode Fuzzy Hash: 84b2fc48ce1f9b88fe0018f18fa80093a8adfccfbe54097ab41e08f49bd46f2f
Instruction Fuzzy Hash: D19189302407218FC325EF38D81855EBAB6FB85324B110A2CD9979F764DFBAED458B81

Function 00F1CA47 Relevance: 1.5, Strings: 1, Instructions: 221COMMON

Download Yara Rule

Strings

4'^q, xrefs: 00F1CBFC

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: 4'^q
API String ID: 0-1614139903
Opcode ID: d74756fef425638eeb248dac27cfda2e908b89ac55e0504a2b2720681c96f5a1
Instruction ID: fb5bb87136a98b3dd195a4306d2649ec32f6b20724929607d4de3e8f271255f4
Opcode Fuzzy Hash: d74756fef425638eeb248dac27cfda2e908b89ac55e0504a2b2720681c96f5a1
Instruction Fuzzy Hash: 6291C271A093928FC706DF28C85099ABFB1FF8631071585EAD0848B367D774DD8ACB91

Function 00F1EF70 Relevance: 1.4, Strings: 1, Instructions: 170COMMON

Download Yara Rule

Strings

~, xrefs: 00F1F06D

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: ~
API String ID: 0-2493274609
Opcode ID: 8db590ed752d56b33fcb78ac9ce34d92086cfdf30f9369736e34e7dc1c4a0c67
Instruction ID: bfba0bbc09445345e954c089a2819ada879f4305f41690b6b689a36b744ecbf8
Opcode Fuzzy Hash: 8db590ed752d56b33fcb78ac9ce34d92086cfdf30f9369736e34e7dc1c4a0c67
Instruction Fuzzy Hash: DF614B71E003099FDB05DFA5D840AAEBBF2FF88310F14846AE406A7365DB35AD86DB50

Function 00F1EF4E Relevance: 1.4, Strings: 1, Instructions: 164COMMON

Download Yara Rule

Strings

~, xrefs: 00F1F06D

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: ~
API String ID: 0-2493274609
Opcode ID: 02ab40f1e15fc86cade444a9b2e8c6d11e0ec1df04cdb055b98311acb7753e4c
Instruction ID: 613e694431576df4dfcec21f8c9a164ead8ed8f034d8887e90c5aea17daa0b2d
Opcode Fuzzy Hash: 02ab40f1e15fc86cade444a9b2e8c6d11e0ec1df04cdb055b98311acb7753e4c
Instruction Fuzzy Hash: 77518C31E003059FCB05DFA5C840AAEBBF6FF89310F14846AE40AA7765DB35AD86DB50

Function 06D23E79 Relevance: 1.4, Strings: 1, Instructions: 144COMMON

Download Yara Rule

Strings

~, xrefs: 06D23ED1

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: ~
API String ID: 0-2493274609
Opcode ID: 4716a78865f78b4ead614fea42a33f2bbe660aad42b6b419e2b2b5f08f11cc75
Instruction ID: 63c9ee4237aac5e11cb01a5f2d840c412f9a127edbb278d4f55d99bb984a27a4
Opcode Fuzzy Hash: 4716a78865f78b4ead614fea42a33f2bbe660aad42b6b419e2b2b5f08f11cc75
Instruction Fuzzy Hash: 1F51CE31A002669FCB51CF68D880AAABBF2FF55324F158595F851DB3A1C734ED44CB60

Function 00F1CB62 Relevance: 1.4, Strings: 1, Instructions: 141COMMON

Download Yara Rule

Strings

4'^q, xrefs: 00F1CBFC

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: 4'^q
API String ID: 0-1614139903
Opcode ID: b237cd8367e48e592b61e5117338bf6a5dce6cc2c580501601a2131597fd0cb9
Instruction ID: 7ad32f1e9fabcccbc3f882b1020a6d98095e66dcffdce9804d552f526d525654
Opcode Fuzzy Hash: b237cd8367e48e592b61e5117338bf6a5dce6cc2c580501601a2131597fd0cb9
Instruction Fuzzy Hash: 7E519170A003469FC705DF28C58499AFBF2FF89314B158AA9D448CB366DB30ED86CB90

Function 06D2ECC0 Relevance: 1.4, Strings: 1, Instructions: 131COMMON

Download Yara Rule

Strings

Deq, xrefs: 06D2ED5F

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Deq
API String ID: 0-948982800
Opcode ID: 52c26f4d641871e24bb4d0a9313e666924f4562aa951bde56f0a978063fff998
Instruction ID: 11f92b125a8c73ea51903d4ee41688e045afaf0a59435e6b35fd09587eb62322
Opcode Fuzzy Hash: 52c26f4d641871e24bb4d0a9313e666924f4562aa951bde56f0a978063fff998
Instruction Fuzzy Hash: B751F470A002118FCB54EF28D594A6ABBF2FF88314B1585A8D455AB3A5DF31ED42CFA0

Function 028A9BB8 Relevance: 1.4, Strings: 1, Instructions: 127COMMON

Download Yara Rule

Strings

Te^q, xrefs: 028A9C56

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Te^q
API String ID: 0-671973202
Opcode ID: bb1e270c580cf0cee153a35e784a70bc79f14edd63ff7c8f4ad332622a672d60
Instruction ID: 26e18ddb51d760e9cd495498a4c0d476bb67850fa10a8af36046328a3b7847cb
Opcode Fuzzy Hash: bb1e270c580cf0cee153a35e784a70bc79f14edd63ff7c8f4ad332622a672d60
Instruction Fuzzy Hash: 54516C38600604DFEB18DB69C958BA9BBF2EF48714F218159E502DB3E5CF75AC81CB40

Function 0712C478 Relevance: 1.4, Strings: 1, Instructions: 123COMMON

Download Yara Rule

Strings

xi, xrefs: 0712C58F

Memory Dump Source

Source File: 00000000.00000002.2958319123.0000000007110000.00000040.00000800.00020000.00000000.sdmp, Offset: 07110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7110000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: xi
API String ID: 0-1033702977
Opcode ID: 9d47a89b476a44f080c0c5b495ba6695195c29d7ad251125f8ca2ff705618160
Instruction ID: 5f21f86fefb91de447775b097a78a56d7f4dabee7c033ab32408e2f0a36df23b
Opcode Fuzzy Hash: 9d47a89b476a44f080c0c5b495ba6695195c29d7ad251125f8ca2ff705618160
Instruction Fuzzy Hash: 7141D3727052618FC722CF29D88092BBBE5EFC472071984AAE9599B696C730EC02D790

Function 028A9429 Relevance: 1.4, Strings: 1, Instructions: 122COMMON

Download Yara Rule

Strings

p, xrefs: 028A9561

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: p
API String ID: 0-2181537457
Opcode ID: e2f05f02b3dd7feccc76c49c13b1d0a9c95e82e1176872f359278811e3bf0a85
Instruction ID: 3b7eef79fda554d680f4a3ad5c699a501a71975d2c7cc8e448fbb3c6ce968873
Opcode Fuzzy Hash: e2f05f02b3dd7feccc76c49c13b1d0a9c95e82e1176872f359278811e3bf0a85
Instruction Fuzzy Hash: 1051AD78A04219DFDB04DF68C994AAEFBB2FF45305F1184A5E805AB3A6CB30ED01CB51

Function 028A37F8 Relevance: 1.4, Strings: 1, Instructions: 121COMMON

Download Yara Rule

Strings

Lv>], xrefs: 028A38E7

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Lv>]
API String ID: 0-4108655183
Opcode ID: cd4d50f789a8fcf047adcf6192252d65f37e48c4990d56b805598738ff28a810
Instruction ID: 429e3a14ffc58496877c467c55b40eb569650d3c005208ddfff3f55fd51b72f3
Opcode Fuzzy Hash: cd4d50f789a8fcf047adcf6192252d65f37e48c4990d56b805598738ff28a810
Instruction Fuzzy Hash: E641D035B002448FCB24EBBD94546AEBBF6EBC9324F14846DD10AD7340CF389806CB91

Function 028A9261 Relevance: 1.4, Strings: 1, Instructions: 111COMMON

Download Yara Rule

Strings

$^q, xrefs: 028A92AD

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: $^q
API String ID: 0-388095546
Opcode ID: d2682a10b577750681d79312bdf3e0abce570ef356c78a84e3307bf3d159d4d7
Instruction ID: faa50d35b087463fc5cda967d5b62f0ab7fd771e17e424bf89e2671f8ddd4c3f
Opcode Fuzzy Hash: d2682a10b577750681d79312bdf3e0abce570ef356c78a84e3307bf3d159d4d7
Instruction Fuzzy Hash: 2441AF78B0C508CBD3295F5A80A852DBFB2BF8570932C9885E046CB394CF329C53CB81

Function 028A9B88 Relevance: 1.4, Strings: 1, Instructions: 105COMMON

Download Yara Rule

Strings

Te^q, xrefs: 028A9C56

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Te^q
API String ID: 0-671973202
Opcode ID: 28a548fd34cbf44142b3e09baaf72c4a7bf704790cb5141ea5e43413560a7bcd
Instruction ID: bd177791fabeb303cb5f1886033a34b27a0fadb8048826fdefe8165484d2ebc6
Opcode Fuzzy Hash: 28a548fd34cbf44142b3e09baaf72c4a7bf704790cb5141ea5e43413560a7bcd
Instruction Fuzzy Hash: E4412239A04614CFFB14DF69C864BAA7BF2AF49314F148065E401EB3A5CFB4AC41CB91

Function 028A1339 Relevance: 1.3, Strings: 1, Instructions: 91COMMON

Download Yara Rule

Strings

LR^q, xrefs: 028A138B

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: LR^q
API String ID: 0-2625958711
Opcode ID: 72d0e3aacc31c6cef15dea2f2a9faa56cdda907c8c9e1f636edae23084d4782e
Instruction ID: c04f26b3c7bb7d19627d7c409b500647ca097dee7dff10543740c43d1b8c3f30
Opcode Fuzzy Hash: 72d0e3aacc31c6cef15dea2f2a9faa56cdda907c8c9e1f636edae23084d4782e
Instruction Fuzzy Hash: 6F319C78F002168FDB44AF78856466EBBF2BFC9214B184069E549DB3A4EE35DD02C791

Function 028A4206 Relevance: 1.3, Strings: 1, Instructions: 90COMMON

Download Yara Rule

Strings

Lv>], xrefs: 028A4238

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Lv>]
API String ID: 0-4108655183
Opcode ID: 5b60c73064a35dda010efffb1b922b1f0bd58ded8337ec6d1aeeb4124e346a30
Instruction ID: 0d91bc760fcc522d75a11452b9c82bf8a6fdb7d2624faccd1d93e8fc7a8af187
Opcode Fuzzy Hash: 5b60c73064a35dda010efffb1b922b1f0bd58ded8337ec6d1aeeb4124e346a30
Instruction Fuzzy Hash: FC4111B4D00349DFDB10DFA9C590ADEBFB1FF08314F148029E809AB254DBB5A945CB80

Function 028A4210 Relevance: 1.3, Strings: 1, Instructions: 90COMMON

Download Yara Rule

Strings

Lv>], xrefs: 028A4238

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Lv>]
API String ID: 0-4108655183
Opcode ID: 19045e0911460d30a9da0ff5c3b5681f8373bb8fa1c2f38784846a650d3b5551
Instruction ID: 2203da5caf8e301d026c73cb1978392ae7894c18f9cee7f3b6f0583f3f186ead
Opcode Fuzzy Hash: 19045e0911460d30a9da0ff5c3b5681f8373bb8fa1c2f38784846a650d3b5551
Instruction Fuzzy Hash: 3A41EEB4D00249DFDB10DFA9C594ADEBFB5BF48314F248029E809AB254DBB5A945CB90

Function 028A0D10 Relevance: 1.3, Strings: 1, Instructions: 89COMMON

Download Yara Rule

Strings

dLdq, xrefs: 028A0D5B

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: dLdq
API String ID: 0-3390252261
Opcode ID: 81c9ae85e7affa5c82300b4d4d6c5abccf97272a705bea441c723665cfc6203d
Instruction ID: 01aed5f81e5678e1e2ecb0afbf5cfc7cb1e24fd13658ab9672e436e97e79d201
Opcode Fuzzy Hash: 81c9ae85e7affa5c82300b4d4d6c5abccf97272a705bea441c723665cfc6203d
Instruction Fuzzy Hash: CD316D79A002048FDB15DF69C498BAEBBF2BF48304F1485A9E445EB361CB75ED05CB91

Function 00F1A177 Relevance: 1.3, Strings: 1, Instructions: 77COMMON

Download Yara Rule

Strings

@, xrefs: 00F1A1BA

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: 9b499061e30f0cf681106216828e453aededef00ce3909b26c817bd6a2c27bf9
Instruction ID: ec6f7cd1530920b1a8085ea2e696d522cc212b636ccc8975d64929464405cafa
Opcode Fuzzy Hash: 9b499061e30f0cf681106216828e453aededef00ce3909b26c817bd6a2c27bf9
Instruction Fuzzy Hash: EF21B172A01259AFCB15CFA5C884AEEBBB5EF89310F14806AE404DB251D7309A44DB90

Function 028AA74D Relevance: 1.3, Strings: 1, Instructions: 72COMMON

Download Yara Rule

Strings

Te^q, xrefs: 028AA77B

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Te^q
API String ID: 0-671973202
Opcode ID: 43df513e72d41a934a100719aae970575dc4a8bd0a95b9309933ee8c213d2084
Instruction ID: de5a2d996093889c8350fd88e5d20ebdef393128e28501d211b969eb0b78274a
Opcode Fuzzy Hash: 43df513e72d41a934a100719aae970575dc4a8bd0a95b9309933ee8c213d2084
Instruction Fuzzy Hash: DD21D835B001058FE7089BADC454BAEBAF7BF88710F14801AE441EB3A4DEB49C02CB91

Function 028A9190 Relevance: 1.3, Strings: 1, Instructions: 67COMMON

Download Yara Rule

Strings

Te^q, xrefs: 028A91AA

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Te^q
API String ID: 0-671973202
Opcode ID: c662bc5afa34982f798f94c18d2ebd8c621498a1970b640ca63ffe089b332ed1
Instruction ID: 59ee7f0ebc1ce15bd9634932b26b7d75fbee396d39480c6134bc7f9ebc715860
Opcode Fuzzy Hash: c662bc5afa34982f798f94c18d2ebd8c621498a1970b640ca63ffe089b332ed1
Instruction Fuzzy Hash: 98218E387101148FEB149B6CC468BAE7BF6AF88B14F24815AE506EB3A4CF759C048B91

Function 028AA760 Relevance: 1.3, Strings: 1, Instructions: 65COMMON

Download Yara Rule

Strings

Te^q, xrefs: 028AA77B

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Te^q
API String ID: 0-671973202
Opcode ID: 202147faea6897e5c31f9fde62e7dcc12ee085f6954ee56fc37bec668ba38e9a
Instruction ID: 32620e377160fac412fb136c65b70a7d0ef00fd1743d7a59651933efa29a2e07
Opcode Fuzzy Hash: 202147faea6897e5c31f9fde62e7dcc12ee085f6954ee56fc37bec668ba38e9a
Instruction Fuzzy Hash: D8115434B001058FE7189B6DC454BAEBAE7AB88710F24841AE506EB3A4CEB49C05CB91

Function 028A3321 Relevance: 1.3, Strings: 1, Instructions: 64COMMON

Download Yara Rule

Strings

|, xrefs: 028A3380

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: |
API String ID: 0-2343686810
Opcode ID: 5ebe12b146733b2cc3e5006a1cb8888b9e4e51db82c1684c6c93b5b58ef1576c
Instruction ID: 1406ad4a521a38713a6d9b32d3209fc3634821bded0c5bc7f5ab7eb86967639f
Opcode Fuzzy Hash: 5ebe12b146733b2cc3e5006a1cb8888b9e4e51db82c1684c6c93b5b58ef1576c
Instruction Fuzzy Hash: 3211B139B002249FDB409F78D914B6E7BF1AF88704F10846AE90AE73A0DF35E901CB85

Function 028A9697 Relevance: 1.3, Strings: 1, Instructions: 58COMMON

Download Yara Rule

Strings

Te^q, xrefs: 028A96C3

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Te^q
API String ID: 0-671973202
Opcode ID: 35372890e05165a06e8819ec80f33256142f38ef5608839c9c556d6b60c709c1
Instruction ID: acebd611593dd7dce1e5a7b393ec78bb0954a49992689a69b121f7d1f821d77a
Opcode Fuzzy Hash: 35372890e05165a06e8819ec80f33256142f38ef5608839c9c556d6b60c709c1
Instruction Fuzzy Hash: B5119378B50104CFDB049F68C8A8B6DBBF6AF88714F14405AE902EB3A5CE759C01CB91

Function 028A96A8 Relevance: 1.3, Strings: 1, Instructions: 57COMMON

Download Yara Rule

Strings

Te^q, xrefs: 028A96C3

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Te^q
API String ID: 0-671973202
Opcode ID: 6d5a3c60d39eacfa64c33f42746648c369e440a1409171bef65d310a1296715f
Instruction ID: cdaa9fc951be54e840d7e22eb4d978bda97100c0d5ee9bd825c562cb2b333b4e
Opcode Fuzzy Hash: 6d5a3c60d39eacfa64c33f42746648c369e440a1409171bef65d310a1296715f
Instruction Fuzzy Hash: 0C118238B50104CFEB149F69C4A8F6DBBF6AF88710F144059E902EB3A5CE759C00CBA1

Function 028AA6A1 Relevance: 1.3, Strings: 1, Instructions: 55COMMON

Download Yara Rule

Strings

Te^q, xrefs: 028AA6CD

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Te^q
API String ID: 0-671973202
Opcode ID: 436379c2a8eb0ba57a0518095f34b66d4457eef00aa9e8a23fd7ad1d5f0e6f6e
Instruction ID: 21844cd6a3b9d146a3ed97548652de72031b438b77fd716eed0ab9075fc072ab
Opcode Fuzzy Hash: 436379c2a8eb0ba57a0518095f34b66d4457eef00aa9e8a23fd7ad1d5f0e6f6e
Instruction Fuzzy Hash: F311E3387001049FDB159B68C428BAE7FF2AB8C700F214068F805EB390CEB59D01CB91

Function 00F1ADE8 Relevance: 1.3, Strings: 1, Instructions: 54COMMON

Download Yara Rule

Strings

$|, xrefs: 00F1AE24

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: $|
API String ID: 0-2813954854
Opcode ID: ef7dfcb3ecc75f5fc8b55063bf123610dbec752b4a5917799846487021406c56
Instruction ID: 51d5e9e8444736f84855af1bc88d2cb6777dcf0e2a24f0c0f4936e0ba6bca4d2
Opcode Fuzzy Hash: ef7dfcb3ecc75f5fc8b55063bf123610dbec752b4a5917799846487021406c56
Instruction Fuzzy Hash: 83119135A0525A9FCB01DF65D8888AEBFB6EFC83107144066E505DB225D7309945CBA1

Function 028A0E3F Relevance: 1.3, Strings: 1, Instructions: 46COMMON

Download Yara Rule

Strings

Hbq, xrefs: 028A0E40

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Hbq
API String ID: 0-1245868
Opcode ID: 97177446d8f1926ef34be1df4ee5a3fc61d86914a6b51ab788fdd7b845f44240
Instruction ID: afb8aa387939a6d0cab8f6c6796cda7283f7f271abc4672ab3527a156871f433
Opcode Fuzzy Hash: 97177446d8f1926ef34be1df4ee5a3fc61d86914a6b51ab788fdd7b845f44240
Instruction Fuzzy Hash: 53F0C8313082941FC346577D986456E3FEBEFCA16032904FAE189CB396DD299C168355

Function 028A8CD8 Relevance: 1.3, Strings: 1, Instructions: 44COMMON

Download Yara Rule

Strings

LR^q, xrefs: 028A8CED

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: LR^q
API String ID: 0-2625958711
Opcode ID: 0b779a8e5e9de374e6614996b157434b4e24a68bd84385c58e63369fd31caba8
Instruction ID: 3b3fe81fb5f9dea30c1e6a12e664ed35e773dc427d4cc0a3b5fc11b30dceab82
Opcode Fuzzy Hash: 0b779a8e5e9de374e6614996b157434b4e24a68bd84385c58e63369fd31caba8
Instruction Fuzzy Hash: 8E01AD79B001199FEB44EBA8D8217AEB7F5FF48700F1040A9E50ADF250EB30AE018BD1

Function 028A8D68 Relevance: 1.3, Strings: 1, Instructions: 41COMMON

Download Yara Rule

Strings

Lv>], xrefs: 028A8D82

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Lv>]
API String ID: 0-4108655183
Opcode ID: d19b8bafb533afae5110718abc26b471c7a38d4d461731f9a672a9820e584015
Instruction ID: 6fb23c0517c3fe5a46e5dbaa44cba19108f3f8cd387356a97eb5f123b81021cf
Opcode Fuzzy Hash: d19b8bafb533afae5110718abc26b471c7a38d4d461731f9a672a9820e584015
Instruction Fuzzy Hash: 73111EB9800248CFCB20DF9AC584BDEBBF4EB08324F208459D559A7250C774A944CFA5

Function 028A8D60 Relevance: 1.3, Strings: 1, Instructions: 41COMMON

Download Yara Rule

Strings

Lv>], xrefs: 028A8D82

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Lv>]
API String ID: 0-4108655183
Opcode ID: 69c7fd7b65ee32255a37323372a693bd8a92443af42f9adbf5280fc974431edc
Instruction ID: 5f1b2053184490751fbcff71c89ae421ce463a530e4f16c00bad12529c5c2763
Opcode Fuzzy Hash: 69c7fd7b65ee32255a37323372a693bd8a92443af42f9adbf5280fc974431edc
Instruction Fuzzy Hash: 4F110DB9900208CFCB10CFA9C685BDEBBF4AB08328F20845AC569A7750D334A544CFA5

Function 06D286F4 Relevance: 1.3, Strings: 1, Instructions: 37COMMON

Download Yara Rule

Strings

xbq, xrefs: 06D2872E

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: xbq
API String ID: 0-73991425
Opcode ID: 220b509574e19a89c1613f856d7c17cfbd4ee651940370951c8a591b514026fb
Instruction ID: 56f0c78263e931100e0e0fc2ca2ab66b49def20c080e2d924d7c2e9f47cda706
Opcode Fuzzy Hash: 220b509574e19a89c1613f856d7c17cfbd4ee651940370951c8a591b514026fb
Instruction Fuzzy Hash: BD016D743442058FD305BF68DC6573A3AA2FBC6214FA0C66CA04B9B398DE78AC05CB90

Function 00F18F40 Relevance: .6, Instructions: 590COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: afe41f2f1d32b1a2d7d6cf0af766c0e1530e20478c8fa104df93cb9e3cc53c6a
Instruction ID: beb1171b6697f3ea58a37424ba93cf3cd70e1d1f4c390642f3391ffad2b2f93d
Opcode Fuzzy Hash: afe41f2f1d32b1a2d7d6cf0af766c0e1530e20478c8fa104df93cb9e3cc53c6a
Instruction Fuzzy Hash: 51424B30A04605CFC725DF68C99499AFBF2FF88310B1589A9E44A9B762D770FC85DB90

Function 00C13970 Relevance: .4, Instructions: 418COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 866aa6d66ce417791bcdc4047881dd865dc24c8b1cf706ca4b0407d84f12dfd1
Instruction ID: d6b0974edc2df6e7560f0738c921d72668082bc90c924c74ccb8414a1c980f16
Opcode Fuzzy Hash: 866aa6d66ce417791bcdc4047881dd865dc24c8b1cf706ca4b0407d84f12dfd1
Instruction Fuzzy Hash: 8C1129226193E0EFC307AA68CC555D57F609D97224B0880ABE1C4DF1B7D5268A8AE3E5

Function 00C13AB2 Relevance: .4, Instructions: 415COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c01adaf6ef441be437cbb9aece19f22fe6a1719ebd4c325b2b7412e185c96753
Instruction ID: 81e440f233dd84438d7ccdc09c2ba094007ea68834410d3190409c4fb1b3f568
Opcode Fuzzy Hash: c01adaf6ef441be437cbb9aece19f22fe6a1719ebd4c325b2b7412e185c96753
Instruction Fuzzy Hash: B8E0EC6061F3C0AFC34786308C629967F649E5310031984DBE584DF2D3D5259B1BC3B2

Function 0712F498 Relevance: .3, Instructions: 253COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958319123.0000000007110000.00000040.00000800.00020000.00000000.sdmp, Offset: 07110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7110000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d6f292b63584e1da73e972c31865afc65f1e5dd099a9e9b696a0a508d3efb29
Instruction ID: fe03309dcb136305f019298a2ed7a3494736fd2a9687b847ff41a1ba3b051ea8
Opcode Fuzzy Hash: 8d6f292b63584e1da73e972c31865afc65f1e5dd099a9e9b696a0a508d3efb29
Instruction Fuzzy Hash: 0C91C370B002159FCB05AB79D8646AEBBF6FFC4310F008529E4469B3A9DF399D069B91

Function 028AA2D8 Relevance: .3, Instructions: 251COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f6496fc4f972cc2646d280c953458574df938e308fd3dc30f80a3f3d72f4a79
Instruction ID: 7818ee686beadaa3a5d050adbe6ca30723b7908af43dc59dd6dac68a34b6ba37
Opcode Fuzzy Hash: 8f6496fc4f972cc2646d280c953458574df938e308fd3dc30f80a3f3d72f4a79
Instruction Fuzzy Hash: 25A19C387002058FDB19EF78D46466DBBF2EF89214B108A69D806DB359DF35E806CF91

Function 028A2A20 Relevance: .2, Instructions: 231COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f78a87a658b2d7ccb98d81fa25002ac7b8af02f954595480d9b4ceecedb8b522
Instruction ID: 4b382e265ebe4d59a08f9cb619456f5b364fdb21efa8a093195db6a9d6261948
Opcode Fuzzy Hash: f78a87a658b2d7ccb98d81fa25002ac7b8af02f954595480d9b4ceecedb8b522
Instruction Fuzzy Hash: 55A17C746003419FCB15FF30E458A2E7BB2FF84714B208A69D5068B3A9DB35D98ACF80

Function 07127580 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958319123.0000000007110000.00000040.00000800.00020000.00000000.sdmp, Offset: 07110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7110000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8e3d66be91af3669a100a00059628768bba1f7998f7ab7262b56d09924d6ced2
Instruction ID: c90339460fe32e74a24f36fe3b08c4ab0fb4f8eba3dfa3901c830dcff23ef4b7
Opcode Fuzzy Hash: 8e3d66be91af3669a100a00059628768bba1f7998f7ab7262b56d09924d6ced2
Instruction Fuzzy Hash: 0AA12F346007019FCB05DF68D994959BBF2FF883207158AA9E4568B776DB30FD89CBA0

Function 028A2A30 Relevance: .2, Instructions: 227COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bcbafcf6c13f44f9d9a1bdd670f626c22304fcf56512745f539f838a6b56c931
Instruction ID: e467427d6812c44201f2a2675fc1e4cceec4a75806becff7c4fd715b1e7df360
Opcode Fuzzy Hash: bcbafcf6c13f44f9d9a1bdd670f626c22304fcf56512745f539f838a6b56c931
Instruction Fuzzy Hash: B8A16C746003419FCB15FF34E458A2E7BB2FF84754B208A69D5068B399DB35D98ACF80

Function 06D24027 Relevance: .2, Instructions: 184COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5072babea2c17729b9ccce2f47087a67d88371aa204a763cdc9c3182427bd3de
Instruction ID: a49b8149e62bbfe219ab79c27b2bd4b387eb7970c90176d18727f1ab831a8835
Opcode Fuzzy Hash: 5072babea2c17729b9ccce2f47087a67d88371aa204a763cdc9c3182427bd3de
Instruction Fuzzy Hash: A9618030B002058FDB54DF69D894AAEBBF6EF89314F148469E846DB365DB35DC41CB90

Function 028ABC01 Relevance: .2, Instructions: 173COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10b4dcced48c4822208d6c968baf8fa91d9e0d9641336ba7795c8927a77f007e
Instruction ID: 203dd53ccf6523d0f35849c54fc1d0f6da89af887823b5e03bc38223f02a0af2
Opcode Fuzzy Hash: 10b4dcced48c4822208d6c968baf8fa91d9e0d9641336ba7795c8927a77f007e
Instruction Fuzzy Hash: B45182B46012019FDB09EF24D868A6ABFF6EFC8311705C5A8D409DB3A9DF75AC45CB90

Function 0712FB38 Relevance: .2, Instructions: 168COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958319123.0000000007110000.00000040.00000800.00020000.00000000.sdmp, Offset: 07110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7110000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa02270d17743b5255c310b2db0d7984a0205677e02d39afbefc194745d040d6
Instruction ID: 6e310bbf6fa22be4f70f31ccf09a002f914f4b78c8426af061e38bd90420f8aa
Opcode Fuzzy Hash: aa02270d17743b5255c310b2db0d7984a0205677e02d39afbefc194745d040d6
Instruction Fuzzy Hash: BF717D70A003069FCB06DF68C484A9ABBF1FF49310F10C9A9D4599B3A6D770ED96DB50

Function 028ABC10 Relevance: .2, Instructions: 167COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2adac57812ced869cb10b647e5229cdfdec4737a961d4eb9550669f69548cfc
Instruction ID: 2cca0ebfec633020a20f769c134593786153d723fc3bf706b54636b319eea144
Opcode Fuzzy Hash: d2adac57812ced869cb10b647e5229cdfdec4737a961d4eb9550669f69548cfc
Instruction Fuzzy Hash: 6D5183746012019FDB09EF24D868A6ABFF6EFC8311B04C5ACD4099B369DF75AC45CB90

Function 00F168C8 Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 152571a175146b15c1818d53ddf9192d8fe4e8e2f05f93599ee30f39b540623a
Instruction ID: c568a12575a6b583aaf201a3c3e39af2e306672b30417a6d9009e71b90215cbb
Opcode Fuzzy Hash: 152571a175146b15c1818d53ddf9192d8fe4e8e2f05f93599ee30f39b540623a
Instruction Fuzzy Hash: BE517F76B00209AFCB01DFA9D8449EEFBF6FF88320F14816AE509D7251D7319955DBA0

Function 00F1746A Relevance: .1, Instructions: 138COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e2250861ecd01b83a34ed28a3f058251e6ee3ca129b48a0c9d428db3f42cad94
Instruction ID: a592bb9c2d61b758aa68e6fe8b64a6cb283d9adc83999478571f22c5e94fa4e5
Opcode Fuzzy Hash: e2250861ecd01b83a34ed28a3f058251e6ee3ca129b48a0c9d428db3f42cad94
Instruction Fuzzy Hash: C3511474E047488FCB25CFA9C884A9DFBF2BF48310F198569E449AB761D770AC81DB40

Function 06D23890 Relevance: .1, Instructions: 135COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d734f7ff1bb3e11acb1cfae5c975ded72e70ba041fe7766b4727f19d9017711
Instruction ID: 481b679bfdff86e71ce6d1c17d9ae74a69b42d58e21bb11072312fae43c9d5bd
Opcode Fuzzy Hash: 2d734f7ff1bb3e11acb1cfae5c975ded72e70ba041fe7766b4727f19d9017711
Instruction Fuzzy Hash: 4F41B532A0425A9FCB42DFA4E8408EFBFB5EF89210B048067F955D7211D731D925DBA0

Function 06D2FB80 Relevance: .1, Instructions: 134COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e8a58ae4422d6c1c6b461ea3dcbf20437c843dbf05d177f2713f315e56603c50
Instruction ID: 17ffc00b2ee817e89cafdd4dba230e2a6c48ad9afa03eb35af58f26b8ba17a73
Opcode Fuzzy Hash: e8a58ae4422d6c1c6b461ea3dcbf20437c843dbf05d177f2713f315e56603c50
Instruction Fuzzy Hash: 9D41F634B441068FE794EB54D594BAF77F3EBD8318F648469C501A7788CE35AC42CBA1

Function 071299E8 Relevance: .1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958319123.0000000007110000.00000040.00000800.00020000.00000000.sdmp, Offset: 07110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7110000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f9610433cebc1447a018bfd1c2a8e7db510074b67a54ffd57488860858352e72
Instruction ID: 4587dd0519d563903260e2cd5b32c675509f72ac5ddcd2e60879987fbf81faf7
Opcode Fuzzy Hash: f9610433cebc1447a018bfd1c2a8e7db510074b67a54ffd57488860858352e72
Instruction Fuzzy Hash: BA516D71A002068FCB05DB58D980AAEFBF6FF84310F14C969D459AB365D771FD468BA0

Function 06D2BA8B Relevance: .1, Instructions: 129COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56d41fde78ca9c9098786e60eccad693b7aeabb2e06e4f4b80e96c43d5af1ddc
Instruction ID: 76797f94e430c7c72f6da4ca23054f3050ac60fa225c84491fcd0bc22f512483
Opcode Fuzzy Hash: 56d41fde78ca9c9098786e60eccad693b7aeabb2e06e4f4b80e96c43d5af1ddc
Instruction Fuzzy Hash: E041E1317000218FD354AB68D494B7EB7E6FBD8328F41C269D50A9B388CFB59C468BD0

Function 028AFB10 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f44db2e36e398c343d95e0ed7caa83341a6dfcb490d14906b2b1739179fda5e8
Instruction ID: 86ff08ea257fb9929fbbc6e5ac64389c1d12abc2dbcb1f7d9d950143ca9f29c0
Opcode Fuzzy Hash: f44db2e36e398c343d95e0ed7caa83341a6dfcb490d14906b2b1739179fda5e8
Instruction Fuzzy Hash: 5D4123397052058FEB11DB69D86096EBBB6FFC5310B0580B6EA09CB251DF31E802CBA1

Function 06D2BA90 Relevance: .1, Instructions: 124COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: be58b4e8b5fbc33db738fb7dc9ab860a7649e13652b4d95d177275088d8f411b
Instruction ID: fd00ef7f8f7b4122a1f5dccb26768834fcee1f13a85ab49a045b495cfb8840ec
Opcode Fuzzy Hash: be58b4e8b5fbc33db738fb7dc9ab860a7649e13652b4d95d177275088d8f411b
Instruction Fuzzy Hash: B141CF31B001218FD354AB68D494B7EB7E6FBD8328F51C269D50A9B388CFB59C468BD0

Function 06D2682B Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 03f2a4229c0d00785e10837ebe50fd8c899d3852ed488df819ffa8fc3bb97f74
Instruction ID: 2e8a0dd2d97c3adcbf3d8145ebecdf547d2a435d43fb321079920e565c592206
Opcode Fuzzy Hash: 03f2a4229c0d00785e10837ebe50fd8c899d3852ed488df819ffa8fc3bb97f74
Instruction Fuzzy Hash: 9E41F735B092569FCB05EB64DC549BEBFB5FF89210B1401EAE885872A3CA34DD01DBE1

Function 00D80CF0 Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945377178.0000000000D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d80000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 99e239bcd312e3e5d75830da6db7e64b022252de97977148b2ca4efc8f0e9390
Instruction ID: afbabbe3c8d74b017caba012650cc2c3ec87f2da48a555b658ef9cd35199ffad
Opcode Fuzzy Hash: 99e239bcd312e3e5d75830da6db7e64b022252de97977148b2ca4efc8f0e9390
Instruction Fuzzy Hash: F241C632204209DFCF656E99C8006FE3FA6EF84359F18446AFA0446660DB79EC68DB70

Function 028A0AA0 Relevance: .1, Instructions: 118COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36ed749a78395e518b8c2a97d87021bb5eb96d470dc2e65727d44570e11424de
Instruction ID: 95ed3416bd0116a8de3bf62d831138e08f47121717dae96f488eb98487dec16e
Opcode Fuzzy Hash: 36ed749a78395e518b8c2a97d87021bb5eb96d470dc2e65727d44570e11424de
Instruction Fuzzy Hash: 4151083C102211CFCB2AEF34F9A49497B72FB847057208568D4418B3ADDB75A987CF90

Function 0712DD48 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958319123.0000000007110000.00000040.00000800.00020000.00000000.sdmp, Offset: 07110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7110000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d8df1560ad4157a658d13bf453f69c459616af0e7c852a95fe4088999b9bb97c
Instruction ID: 3d8593d9ddca4d437ae3e56f1aaeec00cc1d607a516092b3fefec1eafa707aa6
Opcode Fuzzy Hash: d8df1560ad4157a658d13bf453f69c459616af0e7c852a95fe4088999b9bb97c
Instruction Fuzzy Hash: 47418C71B043459FC715DF68D88089ABBF1FF89210B148969E859DB382DB31EC45CB90

Function 028A11D0 Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3896d837176d004dd8d25e961ce0b865f0f22eea941b395f0a85980de2e21cdd
Instruction ID: 47d78a897bf973ef2e9aba0a91ecc2138b8a6e1333081c15e0027d54ef6a9733
Opcode Fuzzy Hash: 3896d837176d004dd8d25e961ce0b865f0f22eea941b395f0a85980de2e21cdd
Instruction Fuzzy Hash: AE41B074E00209AFCB44EFB9C55866EBFFAFF88310F208569D449D7349DA359D428B91

Function 06D2680B Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: add8994eb9b9e57c7e7dc45b2c5f55319b9f723ccc716d2c135e28dce31581fe
Instruction ID: 9e7988a3dc19dc51e8410097671bf7592058d12c09acac60688341849f3f3a8e
Opcode Fuzzy Hash: add8994eb9b9e57c7e7dc45b2c5f55319b9f723ccc716d2c135e28dce31581fe
Instruction Fuzzy Hash: E541F275B052569FCB08EF34D8459AEBBB1FF89210B1445A9E889C72A2CA30D805DB91

Function 0712A198 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958319123.0000000007110000.00000040.00000800.00020000.00000000.sdmp, Offset: 07110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7110000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fbacc0e88e4094cefc15fd177f20298f28f275d5d647af01a0f6dbfa5fc1409e
Instruction ID: ef6da0c34b337ffc5875dd39d4db8c2488307001b6cda8a68efe780ec6d9a79d
Opcode Fuzzy Hash: fbacc0e88e4094cefc15fd177f20298f28f275d5d647af01a0f6dbfa5fc1409e
Instruction Fuzzy Hash: 66416E302007415FD316EB65D951B5ABBE2EFC1320F40DAACD1969F669CBB4F98C8B90

Function 00F1F1D9 Relevance: .1, Instructions: 111COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0eecfbbe55e1d107643e06fcdd8e645db4cfa6ffe6c8c2d4a69612185c8a88d4
Instruction ID: 264c42f17953f45ce524772a78e18cc03adf645fc8a11b9965c25954fecad3e4
Opcode Fuzzy Hash: 0eecfbbe55e1d107643e06fcdd8e645db4cfa6ffe6c8c2d4a69612185c8a88d4
Instruction Fuzzy Hash: 7E418E75600214DFC705DF68D948DAEBBB6FF88321B059056E816CB362C734ED45CBA0

Function 06D25BA0 Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3b8e494de8c1ad5e33974d52490acd4d7a12ada9fbd4f6a31d633f4b34be1e9f
Instruction ID: 7e0d4d87c5728f3f7d27a2235fdc7dcc4b63a3cbf2e6b338aa6c96f1806553f1
Opcode Fuzzy Hash: 3b8e494de8c1ad5e33974d52490acd4d7a12ada9fbd4f6a31d633f4b34be1e9f
Instruction Fuzzy Hash: 5E41B331A102368FCB55EB28DA109AE7BF7BF88704B00066AD0468B369EF34DD45DBD0

Function 00F16DD8 Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3cdc0c25e0891ba678ef0864f290577ef440aa3512d23d620392c1b7e85fad4c
Instruction ID: 65611a34fe30e9f40cfb8418babc48a9dcc2e24082fdce5c4e8b316c948d935f
Opcode Fuzzy Hash: 3cdc0c25e0891ba678ef0864f290577ef440aa3512d23d620392c1b7e85fad4c
Instruction Fuzzy Hash: 5A4131302407465FC725EB29D950A9EBBE2EFC0310F048A38D1968B7A9DA74FA499791

Function 00F1F248 Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 808ee85290baefbcce5bcea7631edf81bd5890aab52fa6a8a51a33b6d47cea62
Instruction ID: 751b3f098b777095c60807272927e866e37578d0e65b236a3dc7569921b7bd07
Opcode Fuzzy Hash: 808ee85290baefbcce5bcea7631edf81bd5890aab52fa6a8a51a33b6d47cea62
Instruction Fuzzy Hash: 6C31CD756042119FC706DF68E9489AEBFB2EF49311B05909AF816CB362CB34ED45CBA1

Function 00F16DE8 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 37cfc3c9e7a23c64cb75ab281b4e55addd8f5825943cc51ecbf2e9416a7ff0ba
Instruction ID: b567821a894783bdef1585805e0740379ca26f66fcf9521d41743fa32176a564
Opcode Fuzzy Hash: 37cfc3c9e7a23c64cb75ab281b4e55addd8f5825943cc51ecbf2e9416a7ff0ba
Instruction Fuzzy Hash: 9C312F302407069FC725EB29D950A5EBBE2FFC0310F049A38E1964B7A9DB70FA499791

Function 06D268B8 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c446d1e4cc71d00f2f1f4b8f2c8affbd88dc9bc7e0e64b7622f2e55d41abd2c0
Instruction ID: 6f05a87757b304cb9bc9ef2f1f913f8ba70fa9cf69aeda5577636e3367753614
Opcode Fuzzy Hash: c446d1e4cc71d00f2f1f4b8f2c8affbd88dc9bc7e0e64b7622f2e55d41abd2c0
Instruction Fuzzy Hash: CC317C71B0021A8FCB48EF79C85456EBBB2FF88310B1445A9E80AD73A1DE34ED05DB90

Function 028AFC48 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbea51e85b414f599651ee0a3de0a7fb475559ae6f88694051ab7981c5c6147f
Instruction ID: db01a6b3c66dbb094aaa6469e7dfb9743650f0fbee7c6e4e77ce46dc2a9781c7
Opcode Fuzzy Hash: dbea51e85b414f599651ee0a3de0a7fb475559ae6f88694051ab7981c5c6147f
Instruction Fuzzy Hash: 153191393002509FE715DF3AD85896A7BE6AF8974471540BAEA0ACB3B1DE31DC42C7A1

Function 0712A748 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958319123.0000000007110000.00000040.00000800.00020000.00000000.sdmp, Offset: 07110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7110000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7fd8bcf669496a36612e2813b4d6c84a0875b0f919ac13d3eb1075940d4b2fa
Instruction ID: d3fae129771b6af581cc7075bbe95e906d19df95bb216a5b54928832ff2f328b
Opcode Fuzzy Hash: b7fd8bcf669496a36612e2813b4d6c84a0875b0f919ac13d3eb1075940d4b2fa
Instruction Fuzzy Hash: 6F2190303402455FD309AB329C6577F6697EBC02B0F04893CE6525F2D8DD75EE4A8384

Function 00F16BD8 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d972031033bac32b4aaf4a816edab0a8322dbed74a71f634654ff99366e3022
Instruction ID: a91e0ab36a2ecff2fd49348e8034455a38ea16bb10635519c9f6e2184ee92e63
Opcode Fuzzy Hash: 8d972031033bac32b4aaf4a816edab0a8322dbed74a71f634654ff99366e3022
Instruction Fuzzy Hash: 6E21BF707001199FCB149F64D8146BEBBFAFB89351F004429FD42DB391DB35AC01ABA1

Function 028A0998 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb27d56fec2c5fc75b10f76d20dd4d17acee5d3f792cfa072062a90ceb00e60b
Instruction ID: dceb464f6c29e2e40aed57dd31b27062ad36f9562f2e66a27950f7d3c46d3069
Opcode Fuzzy Hash: bb27d56fec2c5fc75b10f76d20dd4d17acee5d3f792cfa072062a90ceb00e60b
Instruction Fuzzy Hash: 2D219D3CB012069FEB78AF74D96877A3BA4FF15709B20942DE44BC2184EF38A551CB55

Function 00F16BC8 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbb147335cb762412e2f24361b38f9212a4c01a80af6b5b104e4b5d1c9d26f2e
Instruction ID: 2b2da7e2b39d104f9469a16f2be96388c05c84e3c4fe070208cb9f3a80657de9
Opcode Fuzzy Hash: dbb147335cb762412e2f24361b38f9212a4c01a80af6b5b104e4b5d1c9d26f2e
Instruction Fuzzy Hash: 1721CF7070024A9FCB059F65D8145AEBFF6FF9A351B008429FD82DB391DA35AC01EBA1

Function 0102D2E8 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945991327.000000000102D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0102D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_102d000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 87b78a615663d9efa0b1f2f582ee16493f5242bfd02d1e6952fe02357aab5e73
Instruction ID: 8076c0bd367f972e6642195be2d5b69c85fdb90edf9c7a601f6eaad92c0914f9
Opcode Fuzzy Hash: 87b78a615663d9efa0b1f2f582ee16493f5242bfd02d1e6952fe02357aab5e73
Instruction Fuzzy Hash: 402104B1504200EFDB05DF98D5C4B2AFBA5FB84314F24C5ADE9894F256C376D846CBA1

Function 0102D138 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945991327.000000000102D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0102D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_102d000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 757c5f55c0709fe25c0fc5ee25af862bc4be7feeda9454abdd9211b27046baf6
Instruction ID: 20e1e2d6500069dd35b850e2f84244a9121523d785243e19a3fd777ad2f1685a
Opcode Fuzzy Hash: 757c5f55c0709fe25c0fc5ee25af862bc4be7feeda9454abdd9211b27046baf6
Instruction Fuzzy Hash: 79212671604244EFDB05DF58D9C4B2ABBA5FB84324F34C5A9D8894B646C33AD846C761

Function 00F18F31 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0bd2c8924aa5bebeb594a317a146a1034cef4b8d48be315be8616196da840547
Instruction ID: 846560dd700ef7f719ca891f405dd647e061f3327711f54ad8ef8e8dcdaa228d
Opcode Fuzzy Hash: 0bd2c8924aa5bebeb594a317a146a1034cef4b8d48be315be8616196da840547
Instruction Fuzzy Hash: 68217F31A047448FD725CF29C954D9ABBF2FF89310B06C5A9E44ACB2A2DB30EC45DB50

Function 028A09A8 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01f3b550a1d1a69b4eea90a6844ba103214a837121a50326879574b9f1de9556
Instruction ID: 331fd2a68d5e9377926f4dd909b9f4c914871427a5821692c928a6838223351b
Opcode Fuzzy Hash: 01f3b550a1d1a69b4eea90a6844ba103214a837121a50326879574b9f1de9556
Instruction Fuzzy Hash: 8F21623C7012068FFF78AFB5E97877E3BA4AB04649B105429E44BC2184EF38A511CB56

Function 028A8FF2 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e7e27f82f63abb5b1c7827bf2bd1f74854de967ded19d1838ce1b21686d07730
Instruction ID: 4a8b32c55fe32205d1b782733d951049760519fec49d76d73ae654b102c76333
Opcode Fuzzy Hash: e7e27f82f63abb5b1c7827bf2bd1f74854de967ded19d1838ce1b21686d07730
Instruction Fuzzy Hash: FB21AC38A00214CFDB15AB78C9646AE7BF2FF89718F104428D406EB3A4DF359C46CBA1

Function 028AFB80 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c2f07b98577e043ad912eb1bd3d7f037577e937049be6656c6b6e900a7e51174
Instruction ID: a807745c4d8fbaf1f15d49ce32b21cd10cbe44b7e9414ccddcb7b3939804cee3
Opcode Fuzzy Hash: c2f07b98577e043ad912eb1bd3d7f037577e937049be6656c6b6e900a7e51174
Instruction Fuzzy Hash: EE21F039B0021A9FDB15DF65D9948AEBBB2FFD8250B148065D909DB310DB31E802CBA6

Function 06D2B3F9 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd419b89d0483660d53764a45fb0ec74608a63dc8b542bf1df3533bfd65ff0ae
Instruction ID: 95f390fe186784a30e12f65cb505d58ac625f2b9fd645fc77fc25be9fba41342
Opcode Fuzzy Hash: fd419b89d0483660d53764a45fb0ec74608a63dc8b542bf1df3533bfd65ff0ae
Instruction Fuzzy Hash: 3E2132302092558FD340AB65E890A667BA2EFDA328F6480A7D181C7295DB759C86CBA1

Function 028ACE2F Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7c5b8eb53867b2638f9c8a4140198a92f1941c04d785b70166274a689bc10cac
Instruction ID: 972c26e0d1601f8c961c1594eb16274a00d72e0f763860c1d3ef1bd4d3b511cd
Opcode Fuzzy Hash: 7c5b8eb53867b2638f9c8a4140198a92f1941c04d785b70166274a689bc10cac
Instruction Fuzzy Hash: F5218C78A082489FE745DFA9D4A425DFFF2EF89204F64C89BC005D7254DF358995CB11

Function 00C12C20 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5bc24b0a09a41201eaeb8d605fb710224af8fe6a941e1f219ac7e90709245e85
Instruction ID: a857560848131b5aabae6bb8681146ad2516cf78fce2a2a944627828492db2d6
Opcode Fuzzy Hash: 5bc24b0a09a41201eaeb8d605fb710224af8fe6a941e1f219ac7e90709245e85
Instruction Fuzzy Hash: 7B214C756047458FC714DF28C49089AFBE5EB4A360719C666E969CB702E730EC91CBD0

Function 06D27F30 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f7332ae9690970a4e6a59339937fff733fc37a1d76644433802920a5c51e01e
Instruction ID: 791277d3d2d7c8587dc482d9099b54f6f32b7634c28959a57add1b2b2f7299d0
Opcode Fuzzy Hash: 7f7332ae9690970a4e6a59339937fff733fc37a1d76644433802920a5c51e01e
Instruction Fuzzy Hash: 5E217930E49249AFDB41DF68C89169DBFF2EF82304F2481EAC044DB6A6D7385A49CB41

Function 06D25A78 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1b57bd1780df771ac26f2ddd4278ed931ae6a48c058c95884143b0339361228
Instruction ID: 7fd896095775fd08db8dfc30c892afda506d287c9380f9611ab859c60d054cc4
Opcode Fuzzy Hash: a1b57bd1780df771ac26f2ddd4278ed931ae6a48c058c95884143b0339361228
Instruction Fuzzy Hash: B3110630B002368FCB14A768D991D6BB69BEBD47207104275E10A8F399DE70EC45A3D1

Function 028AA2C9 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3ce0e3a541b0ce547eb823e0d793c7022b7a7dfc38fc86492a8ae5c6e43a6172
Instruction ID: 70c386ca4ba82c184659b5d40dc2cfb5bb4308f1d9277819aab7c0dc2b38598f
Opcode Fuzzy Hash: 3ce0e3a541b0ce547eb823e0d793c7022b7a7dfc38fc86492a8ae5c6e43a6172
Instruction Fuzzy Hash: CA1123387002044BCB19AB78D8606AE77E7EBC86547008579DD0AD7349EF35DD068BD6

Function 06D28470 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 02e8c70c3c868ac070e9ba3b4a4ae1d6581de00f6922436e8b8d620bbee4773e
Instruction ID: 44b93c9f57b35096d86394acdada2693b5515b0aa25aeee48788d05e0053d163
Opcode Fuzzy Hash: 02e8c70c3c868ac070e9ba3b4a4ae1d6581de00f6922436e8b8d620bbee4773e
Instruction Fuzzy Hash: 6811A7307041189FE7009F58E4547BE77F7E7C9715F608165E506A7388CE7A6C458BA1

Function 06D28460 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e37bd0b5ae30d462bb6bec0103261b153fb0c9d9a8a333e116d26fd381ef275
Instruction ID: 36676f36175a273aacea2b3c09c9cc174f6960e6c8c387b040141d7a42e071e6
Opcode Fuzzy Hash: 0e37bd0b5ae30d462bb6bec0103261b153fb0c9d9a8a333e116d26fd381ef275
Instruction Fuzzy Hash: 0511E7707041149FE710AF58D4547BE7AB7EBD9318F608219E502A7388CE7A5C468BA1

Function 06D24F18 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c5739b5482f0b9bb58f439eb22e25ecc8b264461c501549e3baf6cbb2c8869e
Instruction ID: c966003fec2a24a9f3561c447602986a2d5fffa9a2a901c7a7256392ae58e08d
Opcode Fuzzy Hash: 6c5739b5482f0b9bb58f439eb22e25ecc8b264461c501549e3baf6cbb2c8869e
Instruction Fuzzy Hash: 9911263170426A8FCB555B78D82423B7FE9AFD9294B1801E9E849CF3D2DE24CC41C7A5

Function 06D25A67 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0138add484c72007262e163fe1badcd30c528fd3208ffcff5f66f55c7aa45b5
Instruction ID: d989e984e9b2e9969c5c0ef39a353b22913c7a9aaf1889b35258d1ccb2018295
Opcode Fuzzy Hash: e0138add484c72007262e163fe1badcd30c528fd3208ffcff5f66f55c7aa45b5
Instruction Fuzzy Hash: 4E114C30B012228FC711AB24E891D7BF7A2EFD4314B008379E50A8F355DA70EC4597D0

Function 0712A860 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958319123.0000000007110000.00000040.00000800.00020000.00000000.sdmp, Offset: 07110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7110000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 680951bf8bd97336c58a2fd22fa97608e547509a2e29547cdccefcaae8a1fe2c
Instruction ID: 5b47664e4a3294e1d76b8c8602f7e03030707cf2117272853f363016d1efed79
Opcode Fuzzy Hash: 680951bf8bd97336c58a2fd22fa97608e547509a2e29547cdccefcaae8a1fe2c
Instruction Fuzzy Hash: 8F11E3717003168FCB10DF69D48491ABBB6FFC4221710862CE9069B354DF75EC068B90

Function 028A9E00 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e594fe5ac70b5eada0f78515cc54b071e8c13c54b8dd9112cd3246bd7cd7283
Instruction ID: 28fde9ec0f68322230dd27642d1f2423b792e6ef8637de2978c9aa6b8c9ad425
Opcode Fuzzy Hash: 4e594fe5ac70b5eada0f78515cc54b071e8c13c54b8dd9112cd3246bd7cd7283
Instruction Fuzzy Hash: EA11AF746002058FDB01FB78D42069EBBE2EF81310F108A69C545DB28AEF759A0A8BD2

Function 00F1C6D0 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b6e2544e1f76d49f7057881f0235b2cd1468ae837a5150e3802bfc435bbbe076
Instruction ID: 8c4ce80f5c666982bab0001b8021f5af127b4564e4e65e1f0529cd5fd2b3aedd
Opcode Fuzzy Hash: b6e2544e1f76d49f7057881f0235b2cd1468ae837a5150e3802bfc435bbbe076
Instruction Fuzzy Hash: 6A118E346042459FC701DF68C88899ABFF1FF89324B1481AAE449CB372C771ED06CBA0

Function 06D2F168 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 978f2055362b45df9477fe86a6f5ea579eba62aef1f93ffdbbc7b8df6774ce58
Instruction ID: a023d1d964be578c7f75f490fb0e3aab59c2a653a1ab82e430adb71a8087c2af
Opcode Fuzzy Hash: 978f2055362b45df9477fe86a6f5ea579eba62aef1f93ffdbbc7b8df6774ce58
Instruction Fuzzy Hash: 14112BB1A49162CFC792DF68D4005ADBBF6EF9A614750489FD4C4C7210D935CD49CB71

Function 028A1431 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39972e8ed1a2f7afb2403ca192d457b5b884a03f87ff6e0d5b4b7ca16339d30b
Instruction ID: eb5f01ca424ac871e3afb50923dad641ae39d18d9bb10a776be3dc4f31c03825
Opcode Fuzzy Hash: 39972e8ed1a2f7afb2403ca192d457b5b884a03f87ff6e0d5b4b7ca16339d30b
Instruction Fuzzy Hash: 2611E178A01245DFCB55EBB8D45866A7BF2EF89608B1448BDD44ACB365EA31CC42CB80

Function 00F19BC2 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7e4e1e4192e537fe946d65a36686d1cd03fb768e3d03c0497d93f3baa9ca7734
Instruction ID: 0ef366fca251f993713e937b4e1a6a58f2979585af39c2765890a2ac7424d697
Opcode Fuzzy Hash: 7e4e1e4192e537fe946d65a36686d1cd03fb768e3d03c0497d93f3baa9ca7734
Instruction Fuzzy Hash: 81118E30A092068FCB20CB69C594BA9FBF1FF40360F44856AD449CB652D3B8E985DFD0

Function 028A8AAD Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b41b09bbcf268d55ca81857f64a93a2f347a9958ababffa85f8ba5483c4810f
Instruction ID: 0ecfda13414fee7ccbdb80190d3d616b574307ce8e419e07e0da0a526d928914
Opcode Fuzzy Hash: 7b41b09bbcf268d55ca81857f64a93a2f347a9958ababffa85f8ba5483c4810f
Instruction Fuzzy Hash: DC01F76D30E3845FF7535A789C306AD7B65CF42604F0500DAD185CF192DE505C1687BA

Function 028AB8C8 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bc384e629c6aa333ae0b6c0fcccbd7f11f8a8bcb925514a0290690928dda0af8
Instruction ID: 2c2235a9ae26d19a05482e8698626e210cf7e6548faf0ba1601189fea8178550
Opcode Fuzzy Hash: bc384e629c6aa333ae0b6c0fcccbd7f11f8a8bcb925514a0290690928dda0af8
Instruction Fuzzy Hash: F711C239A01218CFEB18EB68D8647D9B7B2FB48319F14046DD441E7394DF768C01CB91

Function 06D2B5C8 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba2dcc1d09114195ff95c38b6f87944a406efdeb4d5920b06b0312dc24c3e756
Instruction ID: 34ff5d82ddeac666e3294cc462a649c0fd817d2140a5d6184bf7af67aaa9727a
Opcode Fuzzy Hash: ba2dcc1d09114195ff95c38b6f87944a406efdeb4d5920b06b0312dc24c3e756
Instruction Fuzzy Hash: DD1125307042428FC355DB38D884769B7E3FBD1318F14867AC18A8B655CBB59D8ACBC0

Function 0102D2E3 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945991327.000000000102D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0102D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_102d000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48042a67946fd5b471a152cae87ddc5a96e5ad52caa5f07da488830fbc7c129d
Instruction ID: 55ca56adafb758a1360c38236a746dd641c22bd2ecf667ae00ef8796da5b15f2
Opcode Fuzzy Hash: 48042a67946fd5b471a152cae87ddc5a96e5ad52caa5f07da488830fbc7c129d
Instruction Fuzzy Hash: 6B119D75504280DFDB06CF54D5C4B15BFA1FB84318F28C6AAD9494B696C33AD84ACBA1

Function 0102D133 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945991327.000000000102D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0102D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_102d000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72d23902bf60047e6ac5528eaef86f122a9a091f4bdaa5726a35430d0a81cb07
Instruction ID: 15ca1be26b840b28a233f77cb51e2539335585a6bdba3742ccc7963a01a1c7cf
Opcode Fuzzy Hash: 72d23902bf60047e6ac5528eaef86f122a9a091f4bdaa5726a35430d0a81cb07
Instruction Fuzzy Hash: 4A119075504284DFDB12CF54D5C4B15BFA2FB84324F24C6AADC494BA56C33AD84ACB51

Function 028A1440 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eea4a4f4bf773a168664db6f5c37fabe227cc1f2022f19b99f43b5bd180e7d7f
Instruction ID: 0369f9ccfa349f3de36718cc07ddd16ec3c332a6a818871b44865b9a78bc20d2
Opcode Fuzzy Hash: eea4a4f4bf773a168664db6f5c37fabe227cc1f2022f19b99f43b5bd180e7d7f
Instruction Fuzzy Hash: 5011A178B01209DFCB54EBBDD418A2A77E6EF88605B1044B9D40ACB354EE31CC42CB90

Function 028A9E10 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46b37a155ddf89962617066a765ff8a6e56082bf5bd774ee25f05ae263a15a47
Instruction ID: 16ed11599066a0d3764dab909a7efb1980cb7300ce5e81db9c40d73e2d8a4d39
Opcode Fuzzy Hash: 46b37a155ddf89962617066a765ff8a6e56082bf5bd774ee25f05ae263a15a47
Instruction Fuzzy Hash: 5B1194746002058FDB45FB78D42069EBBE2EF81314B108A69C145DB359EF759A0BCFD6

Function 028AD3B0 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a943d98d5d54077646f8b42fb1912a2843931f5e8b893f13107e9bee99d86d8
Instruction ID: cd216b382fae829544c4ad5ac3bce957ba98cbc881614fed73c5319d8ca5616e
Opcode Fuzzy Hash: 4a943d98d5d54077646f8b42fb1912a2843931f5e8b893f13107e9bee99d86d8
Instruction Fuzzy Hash: 84017C6951E3C49FDB138B709D262893F70AB07100F1A88E7C485C71A3D53DD90AD723

Function 00F1C6E0 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e05fbe230290b324e20a86f7fdb579accb3d0f811d6f3a6759ff2bc6cd67704
Instruction ID: a80a77c37efa0447804fa338b041a121a3991601ba71c306a1fbf71f42eb23ff
Opcode Fuzzy Hash: 4e05fbe230290b324e20a86f7fdb579accb3d0f811d6f3a6759ff2bc6cd67704
Instruction Fuzzy Hash: 42115135600205DFCB04DF68C884D9EBBB5FF89324B1485A9E8598B362C771ED06CB90

Function 06D26DB0 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76024a2eab39378396e3ce5b9e73db726ac2f168f8bb818048fc021ae129c134
Instruction ID: b807d4c68eef54d7f6fa289c106819b0080942b23c9a303b67e8bb1736000ac7
Opcode Fuzzy Hash: 76024a2eab39378396e3ce5b9e73db726ac2f168f8bb818048fc021ae129c134
Instruction Fuzzy Hash: 7301A232F053768F8B25AB24DD4096FBBE6AFC86243454258D849EB345DF28EC06C7D5

Function 06D27F60 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5600b09494a85a6b2d673ccd5db0854961615d74037a933c0ef1797b560b31d0
Instruction ID: 5ba7750facb021c28cc075cddb4fd02ca79940dbadbe553f47e8fb58da4e7592
Opcode Fuzzy Hash: 5600b09494a85a6b2d673ccd5db0854961615d74037a933c0ef1797b560b31d0
Instruction Fuzzy Hash: 21111C70D04209DFDB90EFA9D5946AEBBF2FB94308F60C1A9D00597654E7319A85CF81

Function 028A37E9 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bf00ddc81f86ed9e47d1c232866426babfe23e568f3afd1e44c70b9a1ccfbee3
Instruction ID: 74cc37ff934a46e31c74d8d1b27d8bcfde93f8e2f4d4f0c6bb48707f3f34ab56
Opcode Fuzzy Hash: bf00ddc81f86ed9e47d1c232866426babfe23e568f3afd1e44c70b9a1ccfbee3
Instruction Fuzzy Hash: 3801F2393002404BD725A77DA5A877EBAD3ABC6365B08447DE00ACBB55CF78DC06CB51

Function 06D2B5D8 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6410fd5ce7982f093a404eb607c6df944e0eb943f4d9f97d0611ce01c2d8f5b6
Instruction ID: f9a92c4f9185b920365312c8c6e8f3ed79c99616967ad5ea4a6ba396e68a0b5b
Opcode Fuzzy Hash: 6410fd5ce7982f093a404eb607c6df944e0eb943f4d9f97d0611ce01c2d8f5b6
Instruction Fuzzy Hash: 99019E303002128BD754DB29D88476AB7E7FBD531DF14863AD24A8B658CBB1E989C7C0

Function 06D2B408 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 07b67a1c486e2faeb31978f79e83fb9884181cf4796acab1f09beb1753a3e743
Instruction ID: 1dc6e63b8333d31938a42dbc1c6a4458e77624bed978601d330c8734a788e57a
Opcode Fuzzy Hash: 07b67a1c486e2faeb31978f79e83fb9884181cf4796acab1f09beb1753a3e743
Instruction Fuzzy Hash: 4D019A343040158FE300EB0AE484A7BB7A7EBD9328FA4C166D20687648CB749883CAA1

Function 07113109 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958319123.0000000007110000.00000040.00000800.00020000.00000000.sdmp, Offset: 07110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7110000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7243d88f789573183b4f0f87590abdf528ba1187cb8258d872b21f201873336f
Instruction ID: 547c999edfe3c3f68261055b04373f6ff79b89d11f94232b54ed40f13e7c13e2
Opcode Fuzzy Hash: 7243d88f789573183b4f0f87590abdf528ba1187cb8258d872b21f201873336f
Instruction Fuzzy Hash: 65110DB4A023188FDB64DF58D880ADDB7B5EB89320F4041E6D509E7355DB349E82CF54

Function 00C143D0 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: db4b02361470ae55ad6d42caa6f5138ee5f1a5d4dadef6fc2241e09a37e0a505
Instruction ID: 9af6978f94740d467ec0bcada71303c749e2315ef446ed48378c514cdd77c97e
Opcode Fuzzy Hash: db4b02361470ae55ad6d42caa6f5138ee5f1a5d4dadef6fc2241e09a37e0a505
Instruction Fuzzy Hash: BEF0F0322007108FC311ABB9B8082C93B6AEB63231F2513D6F1A7CB2E5DB124C0397E4

Function 07125CB8 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958319123.0000000007110000.00000040.00000800.00020000.00000000.sdmp, Offset: 07110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7110000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 162d3c9e1e81e396958ff1f13bc32db1a6a441a9c5104b4cfc3f447d4b360331
Instruction ID: 2f3ec94053fea1c63819cbd734c99b09c1b3ca51650484c0b9b550d288867cfd
Opcode Fuzzy Hash: 162d3c9e1e81e396958ff1f13bc32db1a6a441a9c5104b4cfc3f447d4b360331
Instruction Fuzzy Hash: DEF0BBB7B0122267F721054B5C50BBF6A4BDBC4661F054176FE0582290D636CD71A270

Function 00F1DEA0 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e44479e13533e6fe5ea0161393daee2d90086a7a7387bbd197645ec61698dd66
Instruction ID: 1815c530833374753e126c718aa0c28c8f7e16c0ace488a46174dac8a3860b84
Opcode Fuzzy Hash: e44479e13533e6fe5ea0161393daee2d90086a7a7387bbd197645ec61698dd66
Instruction Fuzzy Hash: 71F05B36B082198F8B18DEA9B4055AB77E5EB5427671440BFD10DCB251DF31D880D794

Function 028ABB49 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e4c3c08be1d0f8dfcc12502aec7781f05685bf35df9929d16d7bf98e8d148f08
Instruction ID: 37d6f988fbf2be5e048b7a432d90b88bafc22c4e9690c8e99709dbef59b8ed8f
Opcode Fuzzy Hash: e4c3c08be1d0f8dfcc12502aec7781f05685bf35df9929d16d7bf98e8d148f08
Instruction Fuzzy Hash: C201A239A022089BE714DB54C8697EE7BB6EB88304F240468D401AB385DFB64D06CBA1

Function 06D2F9E8 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 66bbcaeaf4b148220a20e4c8718309aa61c0f67e5b8319601edf93c15f6eb0d1
Instruction ID: bddf37443d0daf9c1d65b9b6bd0a67772d3ef5027cd530debcdad272d09f24de
Opcode Fuzzy Hash: 66bbcaeaf4b148220a20e4c8718309aa61c0f67e5b8319601edf93c15f6eb0d1
Instruction Fuzzy Hash: 4AF0F6719093489FCB05DFF888114BE7BFA9B4620071044EBE909C7152E931DA1597A2

Function 00C12C10 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7cf149f5d123c2bc94e96f7cf9e8a4a4fd3d76cded8b48975453f2dfdb7c5486
Instruction ID: f060609e5e72c4a787d5888bd15f1643a8241c37b4f614650680086d4f8a10fb
Opcode Fuzzy Hash: 7cf149f5d123c2bc94e96f7cf9e8a4a4fd3d76cded8b48975453f2dfdb7c5486
Instruction Fuzzy Hash: 2201E2742017059FC725CF18C09089AFBF5FF49320315CA5AE89ACBB02D330E981CB90

Function 0712EDF8 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958319123.0000000007110000.00000040.00000800.00020000.00000000.sdmp, Offset: 07110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7110000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1adff12383ba484a02319498e27d22f70c53e631157c9900fa6435ab740030a0
Instruction ID: 64dff6a4156522592e6aed130a51cf84e26f47157433fbca69a4b5d2f33007f5
Opcode Fuzzy Hash: 1adff12383ba484a02319498e27d22f70c53e631157c9900fa6435ab740030a0
Instruction Fuzzy Hash: 34F05E393505118FC748DB3ED84886977EAAFCD65031590B9E606CB374EEB0DC029A50

Function 028ABB58 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dd04d60366cc16135f831ad1ccbe43bde3523962ce0d7cf1dd3177220aaeddfa
Instruction ID: 08e8503155153824d5ce93d96cb9fe59fd8cf61bde70f4f7ab6501d604b5fb7f
Opcode Fuzzy Hash: dd04d60366cc16135f831ad1ccbe43bde3523962ce0d7cf1dd3177220aaeddfa
Instruction Fuzzy Hash: 3EF0A438A02208DBE714DB54C529BEE77B6FB88304F240469D401BB384CFB75D05CBA1

Function 06D265C1 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9dde380aab05d286a2a337a848113a3f81f28caf14ed4b866b97263044850ca7
Instruction ID: 584a81ca5c9563326cca0f4aa4168f7573e6dd1801136f71944781523570a765
Opcode Fuzzy Hash: 9dde380aab05d286a2a337a848113a3f81f28caf14ed4b866b97263044850ca7
Instruction Fuzzy Hash: 46F090B13002059FC314DF20DC4193A77B6FFC9714B04466AE44A87662DB20FC03DB81

Function 06D27E38 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dd46f7750f953f0b5f654a0333e5a4af9cd362f8913f3595969c481dc3fff38d
Instruction ID: a1b264c13d7d28c309c2208665c40b2107d4850b1be05aadedcc4be97492d154
Opcode Fuzzy Hash: dd46f7750f953f0b5f654a0333e5a4af9cd362f8913f3595969c481dc3fff38d
Instruction Fuzzy Hash: 5BF0F6342001004FDB06BB78E56066D77A3EBC1318B544AACC2068F79ACF39AE078FD1

Function 028AB8D8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bcea67e951d76724e2d3f0be32e7405b2e2b8589a460e820a6a27c6c52edf9b7
Instruction ID: ff61d191239c2790ba2e2ac646f02d802f6373ab292872d956c548670c1b3b51
Opcode Fuzzy Hash: bcea67e951d76724e2d3f0be32e7405b2e2b8589a460e820a6a27c6c52edf9b7
Instruction Fuzzy Hash: 48F08138A01258CBEB18EB68C56479E77F2BB88305F140429D401F7398DF764C01CBA1

Function 00F17FF8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00433a0fbf591cd0fe3525ccbbe2761dfd09c923476fbca49a74320a3c1cf721
Instruction ID: 90c29104e71abf0ecfc1697a87fb52bf6e5a43c62e66d8da64accf619b6c7036
Opcode Fuzzy Hash: 00433a0fbf591cd0fe3525ccbbe2761dfd09c923476fbca49a74320a3c1cf721
Instruction Fuzzy Hash: EBF02E7260D7945ED32242356D506F77FD89F852A570441AFE189C31D2D955C806DB50

Function 06D27E48 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f75bf25825881d845cee327bea7389d60159cc70f61f6741d7bb4db3348139cd
Instruction ID: 0cffcfa1671cb33967c7d1a686ccc2df2a21d69f9ef9cb8bdfde2ed6c3b6eda7
Opcode Fuzzy Hash: f75bf25825881d845cee327bea7389d60159cc70f61f6741d7bb4db3348139cd
Instruction Fuzzy Hash: 11F0B4343001144FCB06FB78E46056D77DADBC12147504AACC2068F399DE6AAE078BD5

Function 028A887F Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 774e6c144da102b7628d9646ee54f6a17eb5af322323a295c7e75d9f66e360fb
Instruction ID: e6a15c1db94088db70a31fcaea5bcd556c17346e240f8d2c9575605103ded1ab
Opcode Fuzzy Hash: 774e6c144da102b7628d9646ee54f6a17eb5af322323a295c7e75d9f66e360fb
Instruction Fuzzy Hash: 0EF0552A2000148BC710ABB8D854BADB6A4FFC1310F280865D109C732DEE24CC0A4397

Function 06D2EFA0 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbb2e73e006b123649b565f31f27156815921aa62123e5f79fd6d0f521ec1c5c
Instruction ID: d22ad660119ac2cfc450e5d976f3cae5950f136dd8e95462a474d80b5a96cbc2
Opcode Fuzzy Hash: cbb2e73e006b123649b565f31f27156815921aa62123e5f79fd6d0f521ec1c5c
Instruction Fuzzy Hash: E4E01A217002186BE30C267E5864B6BA99EEBC5A60F24842EA109DB399CC6A9C4603E5

Function 06D265D0 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85e080710e18f60fa78d90934fb9d96cd35e2877eb259cc1c5abdbce015f66ee
Instruction ID: b22455af3b4f91db7325cd9a3786c0e4441cd99a37fc97a5d89e496100fbd879
Opcode Fuzzy Hash: 85e080710e18f60fa78d90934fb9d96cd35e2877eb259cc1c5abdbce015f66ee
Instruction Fuzzy Hash: 8FF058713102059FC314EB24D84186AB7B6FFC8714704466AE44A87AA1DB61FC42DB91

Function 00F1DF10 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 933f996077cced3e4545ddb645b6691ef3125b1955c2fc63089759de180496d5
Instruction ID: 0e371399f9499a9311d203d30a619cc550de7e8e81c1ed532441e0fa03e068fc
Opcode Fuzzy Hash: 933f996077cced3e4545ddb645b6691ef3125b1955c2fc63089759de180496d5
Instruction Fuzzy Hash: A2E09210B093A80BC7062779546805D7FF6DBC269075448EAD006CB391CD689C464396

Function 06D24F08 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ad90335674746f1b34abe30ac16740f0d95c9350e06bc711c3a946d511b2395b
Instruction ID: 15bc7a6130b330314f6528f8e2684452348bc2bb27f8d484fa3b951910f785bd
Opcode Fuzzy Hash: ad90335674746f1b34abe30ac16740f0d95c9350e06bc711c3a946d511b2395b
Instruction Fuzzy Hash: 1DE09232704266DFD7149B54E925A677FE9BF98215B0501D5EC098B352C629D880CBF1

Function 00F1F198 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f1f73725cd22c79d46bf0199985cb6bfb0c48287de9b39ccf9d38135c9ba4435
Instruction ID: f0cf5d6632e1a4e4e877fea2be3ac91910b8570c004fe5db3d86bd89eda87664
Opcode Fuzzy Hash: f1f73725cd22c79d46bf0199985cb6bfb0c48287de9b39ccf9d38135c9ba4435
Instruction Fuzzy Hash: EAE08C353002115BC6001B5EAC8866B7BAEEBCD621B24103BFA0AC3310DEA48C0696B5

Function 06D27E01 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3fd8adb0b818955ead7289e90f4598fe099c2c324998038cdf1f968bed759f48
Instruction ID: dfb41af95aad11df2b27ce1a35feb7f82cb2e9af4984062697b2cf54ed4ba335
Opcode Fuzzy Hash: 3fd8adb0b818955ead7289e90f4598fe099c2c324998038cdf1f968bed759f48
Instruction Fuzzy Hash: FFE022353042144FEB05BB78A8705AD3727EF82608B1005ADC6068F2C3CE399D03CBD2

Function 00C12907 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bc7b150a5c2c29cea46ce88324f92bcbbf7029e5281cf3d7ce7662615289a033
Instruction ID: 5bedb94b83b15c3de5fb2e916e8dcaf79663d7c6f9a2e156cde9b19cd6f038fd
Opcode Fuzzy Hash: bc7b150a5c2c29cea46ce88324f92bcbbf7029e5281cf3d7ce7662615289a033
Instruction Fuzzy Hash: 0DE0DF3100D3801FD782EB65AC408D6BF16DA92214308C4DAB4564F15BCA259D1BC3E0

Function 028ABE80 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b553103d4f4dd422b0124a9b2322ab1ed3ac15551a7a14d80cef6b4f962bc82e
Instruction ID: de81cb0bb907002684ac5db06d07356be208b4f6bd344db622d14dbee8a74dbb
Opcode Fuzzy Hash: b553103d4f4dd422b0124a9b2322ab1ed3ac15551a7a14d80cef6b4f962bc82e
Instruction Fuzzy Hash: 30E0176245E3C04FE3039BB49D236663FB4AB0B140B0E81DBD480DB6A3D0196A49C37B

Function 06D29728 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 87316202ba5074ddae1d50d55a08c4c7b834da2586df97c237d459cbcf5c5feb
Instruction ID: eca32f67939211b87de6506f8a6545bd4286e0347f453f719250e2c16c748fba
Opcode Fuzzy Hash: 87316202ba5074ddae1d50d55a08c4c7b834da2586df97c237d459cbcf5c5feb
Instruction Fuzzy Hash: 3EE0BF32504119EFEF058F84DD119A67B79FB59764F14C01AFD0546222C772DC32EB94

Function 028AD400 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef58040f5a7d14dd37cae6720cea77fba6ecace4e148ff5c747c225fe277ce60
Instruction ID: dc71b6d6c3ec860bff86dcbe410943359971123e3acf78fd2318740eb89a059a
Opcode Fuzzy Hash: ef58040f5a7d14dd37cae6720cea77fba6ecace4e148ff5c747c225fe277ce60
Instruction Fuzzy Hash: 3AE04FBC91520CEFDB24CF74E80875A7BE8E709305F10C875E805C3500EA35A6A1DB51

Function 00F1F1A8 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 12d8eb6713676516afd734303a9db1328ef1bbcf970776c0bfa3009125e2e68d
Instruction ID: a1a4433b1d4e95c971a9fcadafb6a2df505113dc1a74b0af105a96961de3fb44
Opcode Fuzzy Hash: 12d8eb6713676516afd734303a9db1328ef1bbcf970776c0bfa3009125e2e68d
Instruction Fuzzy Hash: 93D05232714221274614268EAC8886BBACEEBCA675324003BFA0AC3300DEA08C0642B1

Function 028AEA4B Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 02802e7e53f4cb253fe0bc96b4ac0d8d6bb51b8c871685ed06fd3855b421765d
Instruction ID: bec2705350dd66e8114d63b78eed2646875e9c3de73b675a4fdf901e02efc42e
Opcode Fuzzy Hash: 02802e7e53f4cb253fe0bc96b4ac0d8d6bb51b8c871685ed06fd3855b421765d
Instruction Fuzzy Hash: 52E0ED38E102498FEB10DFD5C965EAEBBB2BF94248F644455D802EB295DB746906CF40

Function 00F1F99A Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7119e261418707e9d14612c1afa77c946edd5c6839bab6fc718c8f5476eb059b
Instruction ID: 2e6be912ed2eac0ae18189fbade5027f401c5459a54b920d1b62c2b684b479e7
Opcode Fuzzy Hash: 7119e261418707e9d14612c1afa77c946edd5c6839bab6fc718c8f5476eb059b
Instruction Fuzzy Hash: 4FE08C3040A28CBFC702CBA89811ADA7FE99A0610070100EAA844E7162ED228A1197B2

Function 06D26868 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c0cc4916c6348f1a89cd239dc816e1ca10ab4c1f042dc2399bb075561fed3345
Instruction ID: 1c05fc9508ed386cb94ba3cec2c27a84741fb3ad288ea1641bfb82eb69be5387
Opcode Fuzzy Hash: c0cc4916c6348f1a89cd239dc816e1ca10ab4c1f042dc2399bb075561fed3345
Instruction Fuzzy Hash: EEE0C2717102350FCB08B358D51089A3BA6BFC832030102E5EA4D4F3AACE20AC4167C5

Function 00C143F8 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb0ee6cc0f59da453437d75bb982f3ce6f3a67426637cbde935983257a95c41f
Instruction ID: 8a32b7edaf77fcb476205de2524e8f6d9544a3cc176a71a1618e298a7c10bf34
Opcode Fuzzy Hash: fb0ee6cc0f59da453437d75bb982f3ce6f3a67426637cbde935983257a95c41f
Instruction Fuzzy Hash: ABD05E323502248FC314EBB8F84CE9677EDDB49665B0540A6E60DCB221DA62DC108790

Function 028ACF78 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1fa9a431b65cbfb6a3d72b5301c0000a5774534db3f030a9d25432f395367a92
Instruction ID: d6439dcd7f6531d58d82744b7a6e2f6d79ac641751dd251c764281de5b59f4ff
Opcode Fuzzy Hash: 1fa9a431b65cbfb6a3d72b5301c0000a5774534db3f030a9d25432f395367a92
Instruction Fuzzy Hash: 6FE0C276D0A248AFE703CFB48D505E93FF19E4620071141EBD404DB271E8310B059B66

Function 00F18568 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a8e6b807a3831554f1579cf7d33eb72794388e8e08cdfd10f1adb2f5bf500bcd
Instruction ID: 9ad335c0e6d71b20f0a269a78c45c7fd01a46c05dcb9709e5303a02667fdecf6
Opcode Fuzzy Hash: a8e6b807a3831554f1579cf7d33eb72794388e8e08cdfd10f1adb2f5bf500bcd
Instruction Fuzzy Hash: 6EE04830A5C3C19FD302CB7095686D47FE29B17290B4D84DAD145C7152D729D845D751

Function 0712A948 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958319123.0000000007110000.00000040.00000800.00020000.00000000.sdmp, Offset: 07110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7110000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1f1a480ad72d225d02342ca8d3bf0fe651f45339f537aea6157e7c25ff264efb
Instruction ID: 35252d00bd22d477f927c7bd7ca5c0586b13be904866d5f48253d52aa47a381d
Opcode Fuzzy Hash: 1f1a480ad72d225d02342ca8d3bf0fe651f45339f537aea6157e7c25ff264efb
Instruction Fuzzy Hash: 61E09270E0530CAFCB44EFA9E94459DBBF5AB88300F0081A9A809A7364EA345A488F85

Function 06D286B1 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0da8f1cb802c5d8f0f50574c31357fb7b08b30d89417dba0d43009043098c3e
Instruction ID: e1f93261467b06e1064313cf95602b2f106abf12086ad2c6577c07266fd93979
Opcode Fuzzy Hash: e0da8f1cb802c5d8f0f50574c31357fb7b08b30d89417dba0d43009043098c3e
Instruction Fuzzy Hash: CCE0C2907882404FF7005A389C9A7263B62D395200F5440AA64464F3CBC92C84068796

Function 06D2B5A0 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 312efd134e93845b4c7a1c3ac4952a22c394a2adf811612fc41b2dc116690a72
Instruction ID: 264f412db34c77fdf6c2eb87fb471b22f91ecdb93a0de201eb2372c1f984f9b8
Opcode Fuzzy Hash: 312efd134e93845b4c7a1c3ac4952a22c394a2adf811612fc41b2dc116690a72
Instruction Fuzzy Hash: FBD012716093805FD302C628CC11A127FA58B9B645F1580DEA485C7262D6279803C262

Function 06D29213 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e992b56ddeee9bf86a705bb1a38fce05c5c5feadb810fb2596e1b737e464433f
Instruction ID: 2db4baa5157eb5e409156d4b681647af71eab1e7199cf0912a645ace6d42e26b
Opcode Fuzzy Hash: e992b56ddeee9bf86a705bb1a38fce05c5c5feadb810fb2596e1b737e464433f
Instruction Fuzzy Hash: 78D05B322041187FC700CE89DC01DB67B6DDB89220704C056FD55C7342C672ED21E7A0

Function 00C108D0 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef9c180477af566754c468d88c64352a55c561128841297ba3778fef8227d50b
Instruction ID: 582d8f93652cbf0abf37e691034d64888745bbe2ca07ae0cf8d2bf20fddb6d2f
Opcode Fuzzy Hash: ef9c180477af566754c468d88c64352a55c561128841297ba3778fef8227d50b
Instruction Fuzzy Hash: 7FD05E303092803FC303C624CC21C16BF698BD7150B14C09AF849CB293CA22DE02C7A1

Function 06D29738 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0fe6e3aea478687c158d19a34a902664cc9df0a88a38a6ac68c528960ef1b384
Instruction ID: 29f6224dccce5c91cfde4dbcf6ef2d8eab8ae5265d8597ad401a6bfe491303de
Opcode Fuzzy Hash: 0fe6e3aea478687c158d19a34a902664cc9df0a88a38a6ac68c528960ef1b384
Instruction Fuzzy Hash: 44D06236100119BF9B05DE84DC41CA67B6AEB89660714C05AFD1547211C673DD22DBD0

Function 06D29218 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ab869af69afa5e3705abfa003fbeb05737d94153e11a484e1e7a4c73e3e153c
Instruction ID: d8e6f52d84d0e9a7535ad6c92223e7db018a165c074aefbb2bfd7201b7f166f6
Opcode Fuzzy Hash: 8ab869af69afa5e3705abfa003fbeb05737d94153e11a484e1e7a4c73e3e153c
Instruction Fuzzy Hash: D3D05E322001187F8B00CE88DC00CA67BADEB89220B04C05AFD5887241CAB2ED22DBA0

Function 00C128A8 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 048cf9aa35b18fb141ca71ae7150cd255ed8c126b158cdcc26544d7a35809ed3
Instruction ID: 2dd677da4e34b5228f0fb4632d311061858215d9cb35bbb2a0147d34814eae55
Opcode Fuzzy Hash: 048cf9aa35b18fb141ca71ae7150cd255ed8c126b158cdcc26544d7a35809ed3
Instruction Fuzzy Hash: 1DD0177510D390AFC702CF68C810CA6BB75EF8A2007098C8BF8A097252CA719D17C7B1

Function 00C12F58 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52560ebc21561752596c3fb22bbf40d7939c0557b9494cc0181b2a0691575c4f
Instruction ID: 48a82d36a17803017eb7d28983d5a6caefc8669dbd0f73bfbe6511ce3a444a18
Opcode Fuzzy Hash: 52560ebc21561752596c3fb22bbf40d7939c0557b9494cc0181b2a0691575c4f
Instruction Fuzzy Hash: 93D05E3420E3916FC602DB1088A0897BF66ABC6200705988FF88087252CB218E1BCB71

Function 00C11328 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 959ecf309eaef96690e400a2977c31f8abf450e57f7ddfb7a84ac886fef20589
Instruction ID: 279167358de293577fe708f78b2fd63037f9305bb35badb2932e911d9225b581
Opcode Fuzzy Hash: 959ecf309eaef96690e400a2977c31f8abf450e57f7ddfb7a84ac886fef20589
Instruction Fuzzy Hash: 38D0A97010A2402FC201C6208C59883BBA5AB4B200715808AE04AEB223C6318A0797B1

Function 00F18532 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9d16c8f54398b53d726a8e361c46246ba76d589b52069d009386da9d180f9508
Instruction ID: e5a47b694865ef207a0ed0cb442cbc16af81158590fb8f117eb10e4cd0638a29
Opcode Fuzzy Hash: 9d16c8f54398b53d726a8e361c46246ba76d589b52069d009386da9d180f9508
Instruction Fuzzy Hash: 16E0C73824D2804FCB03CB718C60990BFB0AF2225031902DEC44DC7063E626D807CB40

Function 00C10CD1 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da9c674b45566029672cfb2cf311cdcbe501d3f8ec0fa439b6821fdf1a8d9551
Instruction ID: 8e3ca1b6306193ce4da1f1f17489a6827cb598227efe59ed171f3a0b563f4596
Opcode Fuzzy Hash: da9c674b45566029672cfb2cf311cdcbe501d3f8ec0fa439b6821fdf1a8d9551
Instruction Fuzzy Hash: CCD05E30109240AFC315C710CC55EA2BFB69F86204F26C0AAB449CB6A2CF369916D725

Function 00C118B8 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a4f502c527f0bdb501742e252855612bc9e6572f2c787770c325021a21e45166
Instruction ID: cce9c1abb6ea5d72fec73e3236fb022843c6a5a5b25f0e49fe36f0508a024265
Opcode Fuzzy Hash: a4f502c527f0bdb501742e252855612bc9e6572f2c787770c325021a21e45166
Instruction Fuzzy Hash: B5D05E36208160BFC305CB4CF841C96FBE6EBC9720B05C45BF44483611CA32EC12CB91

Function 028AC0CF Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fad96b7889ed555f39e30203b0d184cdf605705cefc3515896db2bfae0b94193
Instruction ID: cafc07199c950f1189c404d46cf43c1f917af47000d66cb1a506fc329aa36981
Opcode Fuzzy Hash: fad96b7889ed555f39e30203b0d184cdf605705cefc3515896db2bfae0b94193
Instruction Fuzzy Hash: 9CE0EC7694928C9FCB92CFB09A0269E7FB0EF45100B1455DFD808E7151D9365A059B61

Function 00F18578 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a33290abb2739767ffb93886c96223b526e1aa359f469cbb54e5507b09d9ed83
Instruction ID: 4b63cc829a3294d8296a8519ae97067b46e9e5921e205fc810339b21502f2fc8
Opcode Fuzzy Hash: a33290abb2739767ffb93886c96223b526e1aa359f469cbb54e5507b09d9ed83
Instruction Fuzzy Hash: ADE01771A00248EFC700CF58D688E91BBEAFB19360F09C895E6098B212D731EC81DB60

Function 06D26679 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ef05fac4e2ce13bc37ce0ca18ce293087ab89280c7ef6d5844a37ebd6a0e19b
Instruction ID: f236474dc20af3995b2dec8e5c9fe6c7d19579e2f138b31c9016b4166e252941
Opcode Fuzzy Hash: 1ef05fac4e2ce13bc37ce0ca18ce293087ab89280c7ef6d5844a37ebd6a0e19b
Instruction Fuzzy Hash: D5C0C0303443412FE3009170790193E23938BC0F08B004077E00CC69C5CE02D8132302

Function 06D298E8 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 37d3e08756be83a85b28801f90e864b3b259b2f300dd8af98f109f34c8c4dafa
Instruction ID: e95a59262276a0f8c7dbd786bc26712ba8c78e547a3886a8d65ac834976a3bda
Opcode Fuzzy Hash: 37d3e08756be83a85b28801f90e864b3b259b2f300dd8af98f109f34c8c4dafa
Instruction Fuzzy Hash: 66D0A961B1EA808FE302C3B08C667417F209B67202F5AC8DAC681CB297E625C807CB21

Function 06D2F828 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c3dab8f3f6250a35fa079710ea755839ad06e7dcf0d2c6ded0850f80af8a48d9
Instruction ID: 1475dd5a24a357f47c1dccc215dab2d7edcac1e56e077357553a1240583112ec
Opcode Fuzzy Hash: c3dab8f3f6250a35fa079710ea755839ad06e7dcf0d2c6ded0850f80af8a48d9
Instruction Fuzzy Hash: 81E0EC705043416FD351DA24C815A55FBF09F96234F2489BE9494C71A6E7369847DB11

Function 00C11388 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1468b4eb12c7cf5e9aa0868920855011334c9bb9a49226f2b5fd67b0798e18e
Instruction ID: a797baa7e2fbfb113bcd073ae0a96aa015d60771bed3065de203d655f0e4ea62
Opcode Fuzzy Hash: a1468b4eb12c7cf5e9aa0868920855011334c9bb9a49226f2b5fd67b0798e18e
Instruction Fuzzy Hash: 3DD0A73030A2803FC301C224CC61813FFA58FCA104305C49EB4DCC7252D625AD02C320

Function 00F18540 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd7743b6d47d09a76f9115dbaea1c42651baf3f5a712bdea8ee4e3d221cb6972
Instruction ID: e239bd5b44f92d9183bf5e43021099e80bfa426e82ae91d7f51286fdda4f6f7c
Opcode Fuzzy Hash: fd7743b6d47d09a76f9115dbaea1c42651baf3f5a712bdea8ee4e3d221cb6972
Instruction Fuzzy Hash: A2D0C9797142088FCB00DBB5E95886677AAEB4862931445A5E50DC7621EA32EC539A40

Function 00F1DF00 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d80cf4072b88e9c71b5f1d3293eaeb421b53651e17fd8f1daeb1f6ea05e8279d
Instruction ID: e7e3521aee38d4aa21abfab284d99c5c1b736891d0d96b6115df44ed1699f552
Opcode Fuzzy Hash: d80cf4072b88e9c71b5f1d3293eaeb421b53651e17fd8f1daeb1f6ea05e8279d
Instruction Fuzzy Hash: D5C080319052285FC2007749FC447D9BF7CF7456B6F716052D50EC1111C6106C435BD5

Function 06D28FCB Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39faefc0a35f189984cd9b690410971e6b2f0e3d6bb21057e67ab70b3e75942c
Instruction ID: 6d325d3a2f71434e45cc87bcb821e59dbbff747e07c81fdfd55877272bfe8841
Opcode Fuzzy Hash: 39faefc0a35f189984cd9b690410971e6b2f0e3d6bb21057e67ab70b3e75942c
Instruction Fuzzy Hash: ACD0A9722083509FD300DA08C811B27FBA5EBD9300F08CCAEE84087342CA62EC02D7A1

Function 07123D70 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958319123.0000000007110000.00000040.00000800.00020000.00000000.sdmp, Offset: 07110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7110000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d16fbef66dc86b8e4da48123e6caf121495934955304cac0fbf30862d2eae6e
Instruction ID: 8020cc14ad9ac797119315ffbdf6b1182571932b5bcbb0c6ce22d78a38721bfd
Opcode Fuzzy Hash: 3d16fbef66dc86b8e4da48123e6caf121495934955304cac0fbf30862d2eae6e
Instruction Fuzzy Hash: 01D0C97594110CEF8B01EFA8991059EBBEADB4A200B5046F69508E7220ED329A105BA6

Function 028AC0E0 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57e64874ebf552933f0602864f97669ce9675e0591683649e8f6ff99bb7ba0e4
Instruction ID: aeb2a4e8fe283007116cb1384becf40f186332341487af0cef4e25452b867a8c
Opcode Fuzzy Hash: 57e64874ebf552933f0602864f97669ce9675e0591683649e8f6ff99bb7ba0e4
Instruction Fuzzy Hash: EAD0C97194110CEF8B40DFA4DA019AEBFF9EB49200B1056EEE909D3210EE329A10AB91

Function 028ACF88 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c704030c9c592efd1bce4c641468b61b940fac0cac2f94b2123d56feec5f8f82
Instruction ID: 74b900109a27c58ce9691434cc0c5cc73d6ff97926fbac4fced0350a2e55e584
Opcode Fuzzy Hash: c704030c9c592efd1bce4c641468b61b940fac0cac2f94b2123d56feec5f8f82
Instruction Fuzzy Hash: 11D0137594110CEF8740DFE8C90055D7BFDDB4520075045E6D504D7110FD315F105795

Function 00F1F9A8 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 180e85d90861464744808878d9712f0cbcefd2d6f6c57d16295347b8298ece8d
Instruction ID: e0a55d46a3993ab1c85dfb85a706245d5965bd0cbd097b5f37b7da34109c42d6
Opcode Fuzzy Hash: 180e85d90861464744808878d9712f0cbcefd2d6f6c57d16295347b8298ece8d
Instruction Fuzzy Hash: 11D0127594110CEF8B40DFE8D9115AEBBFEDB4A200B1045E69909E7220FD329F106BA6

Function 00F1E4AC Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7a97823469f2ccb60fa5e64734959f0320a3ebd4c19ffd73e49a53659416d7e
Instruction ID: bef85d9794710a1116fe2810f2183cec91809c35fbc5a908cb0e8966aa3a3107
Opcode Fuzzy Hash: d7a97823469f2ccb60fa5e64734959f0320a3ebd4c19ffd73e49a53659416d7e
Instruction Fuzzy Hash: 40D0C935B400148FCB44DBADE0505DC7BF5EF88315B1000AAE20AC7264DB3199519B80

Function 028A25F1 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 899636c75fae91b81992c050a34c9b64e5b68007b62f6515f57c81f836e9b1e1
Instruction ID: f404e59e6243218f4984f7e3c9937305379056b21837aa8c27aeba433a745c6b
Opcode Fuzzy Hash: 899636c75fae91b81992c050a34c9b64e5b68007b62f6515f57c81f836e9b1e1
Instruction Fuzzy Hash: 8FD0A9341983408FC304EFA8E4E9D92BBB8FF09A00B0000D8E8804B723C720F812DB21

Function 00F1EAA3 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9209e25c598734358350395246c67e3520ec2605de91c1d82ce9dcfe559f4756
Instruction ID: f24e39f9d24b8e7d4093d5f13fb6a1af54fa00405c1e1cb4e2d428a31d0d777f
Opcode Fuzzy Hash: 9209e25c598734358350395246c67e3520ec2605de91c1d82ce9dcfe559f4756
Instruction Fuzzy Hash: A6D02232308054CFCB00CB28E4268FCBFB0EF4131279580DAE609DF222C321DA14D780

Function 00F1EAAC Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01d81fec1e8cfac5b41d85516e27bf000d7bf443b416d4b446d3077d41f9ec28
Instruction ID: f26853d4af2dcadce3b2a60d79860b27784a24cae7eec6c8dae782b4c6dc1dde
Opcode Fuzzy Hash: 01d81fec1e8cfac5b41d85516e27bf000d7bf443b416d4b446d3077d41f9ec28
Instruction Fuzzy Hash: AAD012357800148FCB04D76CE5144EC7BF5DF8471171140A5E209C7261DB21DD556740

Function 00F1EA63 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 069e0d8ac2829e91a2a319f41b2a4ce4f659c9f0e646e92c737bba0dad50aa14
Instruction ID: 9cb4c28197c2a008ad62023b1b82a716f7036835f9275d17d8ccfa1281eecb63
Opcode Fuzzy Hash: 069e0d8ac2829e91a2a319f41b2a4ce4f659c9f0e646e92c737bba0dad50aa14
Instruction Fuzzy Hash: 60C012357800148FCB00D66CE5144EC37B5DF8471171000A5E205C7260DB219D556740

Function 00F1EA5A Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e4f49f56a691826f548e277f20b64c7b070de6f17c4d2719c5c4d0b340574aa1
Instruction ID: eaf6456658ab420f0360cbf613cbce3804f8788215b96a3dc351fc76cc096393
Opcode Fuzzy Hash: e4f49f56a691826f548e277f20b64c7b070de6f17c4d2719c5c4d0b340574aa1
Instruction Fuzzy Hash: 09D0A9363480548FCB008B28E4228E83B75EF46612B5040DAE6098B121C2218A559740

Function 00F1E714 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f49ebbc3b09f70a14da61febd2b16eb5aedbdab93ca0d6f566c4620ee8a637e8
Instruction ID: 6e8e7d3c32373df27457f0f4758805a82bb4b46ffd85ae5e935237df6240f6a8
Opcode Fuzzy Hash: f49ebbc3b09f70a14da61febd2b16eb5aedbdab93ca0d6f566c4620ee8a637e8
Instruction Fuzzy Hash: 24D012357800148F8704DA6DE0104DD77F1EFC431572000A6E206C7634CB31DD91CB80

Function 06D28F08 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00772ef60ab7137dbd8218d06652cb66b9dcb2af41cc291f2c3cb6bf98335ed8
Instruction ID: 08d229f0fb87569483e0f37816c98370ad12c5145679e69fe51d4708c4079fee
Opcode Fuzzy Hash: 00772ef60ab7137dbd8218d06652cb66b9dcb2af41cc291f2c3cb6bf98335ed8
Instruction Fuzzy Hash: 61D0C9742001009BC304CB08D840F22B3B1FBD8615F30D459A80987322DA35A803DA00

Function 06D2ECA0 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cc2afd426b64352d58dd1c83b1ff569056c1eb6891e14deb807c509358248086
Instruction ID: 529e824e193cf3eba39b61680f4d26505b0d32de5dba8ae63c314507bf137d21
Opcode Fuzzy Hash: cc2afd426b64352d58dd1c83b1ff569056c1eb6891e14deb807c509358248086
Instruction Fuzzy Hash: 99D012657C91401FC305C618D820431BB929BCA305719C0EEA819CF257DA17DC578651

Function 06D2B1ED Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fbe97d0d031c5929010754bf65416f4d339f3e41eba08edc5d3dca351569c122
Instruction ID: a857c09dc8a2d57ed6b029bb8af01bba24a1841f45818803cb3639bbc0f18de4
Opcode Fuzzy Hash: fbe97d0d031c5929010754bf65416f4d339f3e41eba08edc5d3dca351569c122
Instruction Fuzzy Hash: 62D0C934A00229CFEB40DF98D8956EDBBB2FB48310F104529E842B7394CB366C42DB54

Function 06D2FDD2 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7781dccb19a04aa897f808ed8eaef5a462c5b853b83e1626a711605a68df695a
Instruction ID: 054e7ddf2baa5d446ca99117c0fcf63957664659c5e5839ee9b6ebbd9fdab674
Opcode Fuzzy Hash: 7781dccb19a04aa897f808ed8eaef5a462c5b853b83e1626a711605a68df695a
Instruction Fuzzy Hash: DCC08C34301100AF8204C608CC40E63F7E99FC8240714C02C780CC3351DB32EC03CA60

Function 06D25B71 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f8c3b0707b9489ae0137fc40cae57d8298be9234b2321f840ddf9cff8c5c995a
Instruction ID: 81e0f2fa42003a7306fc6a17b45332c050a35c189c0a18e4da1d72b086b7ed5e
Opcode Fuzzy Hash: f8c3b0707b9489ae0137fc40cae57d8298be9234b2321f840ddf9cff8c5c995a
Instruction Fuzzy Hash: 7DC08C3AB0C2A48BC26263283C1CBAABE50FB52002F0800CEE182872AAD2244402C741

Function 06D25B30 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 981a3537e450edda23e9bacb5a4a69d1f7ff26357808b597b082ab3774f77487
Instruction ID: 66b945712781ddad8cdc15d6ba9a70c4bfdd0916148eb93e03074aa921abf079
Opcode Fuzzy Hash: 981a3537e450edda23e9bacb5a4a69d1f7ff26357808b597b082ab3774f77487
Instruction Fuzzy Hash: 72C012310547448FC340976CD40DB01B7F4EB0D628F5580D1E0098F233C621A8018704

Function 00C11F02 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 904f4c6935607a6154bdf7c0a2fe7616b5ea59782af64b1307d1be0710911016
Instruction ID: 4b14138493f1292503178818a71046b257a8cf8e776c40657bb3a13a8cfb6872
Opcode Fuzzy Hash: 904f4c6935607a6154bdf7c0a2fe7616b5ea59782af64b1307d1be0710911016
Instruction Fuzzy Hash: B6C08C3010E2805FC30286249C10C557BB69A8210830880CAB404CB153CF22CE1397A0

Function 06D2667E Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: acb66604cccf9419d6f3e3466d3695b2a2ca5bc0c9d5207942b8c3a66bb3fd78
Instruction ID: a8eb2227dee23f843284622558ec55b1d62c6040cd3c17169e86dbda40fb289a
Opcode Fuzzy Hash: acb66604cccf9419d6f3e3466d3695b2a2ca5bc0c9d5207942b8c3a66bb3fd78
Instruction Fuzzy Hash: BFC08CB2E4928CEBD7104AA0BC0D3A57730EF2520BF0001CAFC0A000019331442497D4

Function 06D28CA3 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36c9b30e5a7472dac0fb0190331ee2162163fd3add0721aaab9e6d50a1550ce0
Instruction ID: cce977ea3851abcf60e5b1e5d80524b078c9edf2bb8efbb0d015bdc96b44cd53
Opcode Fuzzy Hash: 36c9b30e5a7472dac0fb0190331ee2162163fd3add0721aaab9e6d50a1550ce0
Instruction Fuzzy Hash: DCD0122131E7401FD381C630CC5B749EB90DB81205F18C899D4088B257DA32C907C700

Function 06D2FB02 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 97f152681f1ea774660e8c713643453b721f0c3c03fea58963996b25ceb1480c
Instruction ID: 7d36391a80ca182b2afaabdb5bd4f3d85dfdfbfab842c50f9723b7b5dd2febe2
Opcode Fuzzy Hash: 97f152681f1ea774660e8c713643453b721f0c3c03fea58963996b25ceb1480c
Instruction Fuzzy Hash: F8C0122020A2C01FC307C624CC18845BF668B8A208B1980DAA098CF193CB279916C7A1

Function 06D2FB60 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 397ca0e27e26d179ed600ac65a89b2deaa2a16e5f8b45c456ed0d8dfd7277fe9
Instruction ID: cf47b36ef0259f1ab05975d2f39eb535c82bf31288418414233dc3ca537d2241
Opcode Fuzzy Hash: 397ca0e27e26d179ed600ac65a89b2deaa2a16e5f8b45c456ed0d8dfd7277fe9
Instruction Fuzzy Hash: A8C012319081008FC305CF64D450854F762AF81204B19C0EDAC198B152CB339E16C751

Function 00C10CE0 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7fbcb63472128d0a210ea9036b863d07e77fffc7870fc97c2ca3b239b1a2b54e
Instruction ID: 39a73c9bbe3c0ed7792a8b53aabb37d2f4b2636dfcf14e288d4917beaa58d51d
Opcode Fuzzy Hash: 7fbcb63472128d0a210ea9036b863d07e77fffc7870fc97c2ca3b239b1a2b54e
Instruction Fuzzy Hash: 35C04C753415025BD354C618C851A26F7A6DFD8315F14C47D6449C7759DE36DC03D614

Function 00C10D46 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d20c8286cf96342d8ae03d76641fb74bce3b678c8ff8d865945e30fb5390703c
Instruction ID: 0b4faec4d0b5d40636ae1b60d085e9128cf52c0d103c68954e178da9504780f3
Opcode Fuzzy Hash: d20c8286cf96342d8ae03d76641fb74bce3b678c8ff8d865945e30fb5390703c
Instruction Fuzzy Hash: B9C04879301100AB8248DA18C895C26F7AAABD8255B24C46DA84DC7365EA32EC03CA60

Function 0712A920 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958319123.0000000007110000.00000040.00000800.00020000.00000000.sdmp, Offset: 07110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7110000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1bd24d3baba5f69f44a69dcde567720b3e339e6805ca95cf328af6bb04b9ae3b
Instruction ID: 8852bc75330cb5a187c575a93f3f2af58861646f397a09c9751e9f2e8b52842f
Opcode Fuzzy Hash: 1bd24d3baba5f69f44a69dcde567720b3e339e6805ca95cf328af6bb04b9ae3b
Instruction Fuzzy Hash: BEB0927094530CAF8620DB99990185ABBACDA0A310F0001D9F90887320D976E91056D1

Function 028A0A8F Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 88558980396d05a4c17fe12edb2f611215bb038845c5ec298e16e7d03c28342b
Instruction ID: fc0c9df440e91fc8104105dbaa3c5205af4114a65a5cb0942a5098bf8ce62723
Opcode Fuzzy Hash: 88558980396d05a4c17fe12edb2f611215bb038845c5ec298e16e7d03c28342b
Instruction Fuzzy Hash: 79C08C3C10510BCEF3302FE0D82CB6C3A10AB83349F100015F483C008A8EBD2825835E

Function 028A0A73 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ac742396dd45655146b6aa8e7fa5aa12d63e18e11f49fa5a8e4f25791b1373d
Instruction ID: 69349ffeb979eada65b0c2d9c634e12f70971521839d691518960c45ffd7cb49
Opcode Fuzzy Hash: 9ac742396dd45655146b6aa8e7fa5aa12d63e18e11f49fa5a8e4f25791b1373d
Instruction Fuzzy Hash: CEC08C3C10554ECEFB306FE0D82CB6C3A10A783349F10001AF083C008A8EBD2865C75E

Function 06D28D10 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 16581dba91a5fda841cf47983153eb36e4fc24851952f78b75638f70de6cde10
Instruction ID: 60a72056a403d9f31dd85fef4a7a76d12bb133d0d450fb6ef353260f5a4d9492
Opcode Fuzzy Hash: 16581dba91a5fda841cf47983153eb36e4fc24851952f78b75638f70de6cde10
Instruction Fuzzy Hash: 0BC09274300100AF8348CA18C895C26F7E6EFD8214B24C46DB84DC7365EF32EC03CA10

Function 07120958 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958319123.0000000007110000.00000040.00000800.00020000.00000000.sdmp, Offset: 07110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7110000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 16581dba91a5fda841cf47983153eb36e4fc24851952f78b75638f70de6cde10
Instruction ID: 60a72056a403d9f31dd85fef4a7a76d12bb133d0d450fb6ef353260f5a4d9492
Opcode Fuzzy Hash: 16581dba91a5fda841cf47983153eb36e4fc24851952f78b75638f70de6cde10
Instruction Fuzzy Hash: 0BC09274300100AF8348CA18C895C26F7E6EFD8214B24C46DB84DC7365EF32EC03CA10

Function 028A2600 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 673ffefb3b735f8a2151d2cdc1ba427ee45a9fce218748d7dbb4039a122c10ea
Instruction ID: d0d4b7edd872af1d688a0784648398922fb01608a9c96785a27460794156af64
Opcode Fuzzy Hash: 673ffefb3b735f8a2151d2cdc1ba427ee45a9fce218748d7dbb4039a122c10ea
Instruction Fuzzy Hash: 67C048392602088F8248EB99E588C12B7A8FF58A003410099E5018B762CB21F810DA61

Function 00F1F16F Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 439bd0e55b4bc964603a13905010e8fc8a527c700a9c4a6a01c39f745e27c9d4
Instruction ID: 541efc1674c0f8c96fd85d2ea5e1c183282be34eeb1a567f598b3ca08b3ca7e2
Opcode Fuzzy Hash: 439bd0e55b4bc964603a13905010e8fc8a527c700a9c4a6a01c39f745e27c9d4
Instruction Fuzzy Hash: F8D0123215E386CFCF16CF3098A46407F307F4220175942FAD4594AAA3C7254955CF55

Function 06D25B40 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b76679b0a354449729844e828cdbdd8dc5f87ab3334555cc76ca9f307cd6f9ad
Instruction ID: a0ccf6e4bed68dc0c69f5d0bbd707ad7c253f4111acce2a0e91a8f8d8fd4bd45
Opcode Fuzzy Hash: b76679b0a354449729844e828cdbdd8dc5f87ab3334555cc76ca9f307cd6f9ad
Instruction Fuzzy Hash: 03B092351602088F82409B68E448C00B3E8AB08A243118090E10C8B232C621F8008A40

Function 0712C058 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958319123.0000000007110000.00000040.00000800.00020000.00000000.sdmp, Offset: 07110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7110000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e5f7bb4469dd86741ba559f3f2d76f9886485a4250b58f73171df0df69570d72
Instruction ID: d8ebb8a66f4d4ddbe60b7037d1fc6cbc958c98475df716f27abcdf5396cb2c83
Opcode Fuzzy Hash: e5f7bb4469dd86741ba559f3f2d76f9886485a4250b58f73171df0df69570d72
Instruction Fuzzy Hash: 93B0123004524D4FCA017B55FC44504771CE7402057C00221B00C0A2295EB9688A86D4

Function 06D29850 Relevance: .0, Instructions: 6COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b6b14a5c43cdf3eba80cbdba6d5498c8aad6ce7be20e30a682a1089889847b3e
Instruction ID: 930f186fa0141636cd9a3563167345f944cae8e432c342183baa65483180dbb3
Opcode Fuzzy Hash: b6b14a5c43cdf3eba80cbdba6d5498c8aad6ce7be20e30a682a1089889847b3e
Instruction Fuzzy Hash: BFB0123024100147D344DA04C842624B313DFC0309F18C0FC5404CF64ACF3BD8039600

Function 06D26692 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a94464eaa00cf75fb00b75185bc2e1f26ec8f7b32cba3820cdba757d75b48c26
Instruction ID: 4a5f5a112c6940c7a03a757cddc076432de919713f6323e1fb5bed5ae87683b0
Opcode Fuzzy Hash: a94464eaa00cf75fb00b75185bc2e1f26ec8f7b32cba3820cdba757d75b48c26
Instruction Fuzzy Hash: 42A02230C0E28CCB82200A203C080323330E22000BB0002C2EC8F00220CA23E82002C0

Function 06D27DB0 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 848e7b2b3d1d7438aceb18ee9ce77d60f8a3148b9db338e3d364b5add5ce48b1
Instruction ID: 424522431131923360a2424e5b60fcaca403654da384226d21dcd1d1d325544f
Opcode Fuzzy Hash: 848e7b2b3d1d7438aceb18ee9ce77d60f8a3148b9db338e3d364b5add5ce48b1
Instruction Fuzzy Hash: B3A001746050109B8689DA58D991818B7A2ABC9219728C4ADA819CB25ACF33E9039A44

Function 00C12280 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 848e7b2b3d1d7438aceb18ee9ce77d60f8a3148b9db338e3d364b5add5ce48b1
Instruction ID: 424522431131923360a2424e5b60fcaca403654da384226d21dcd1d1d325544f
Opcode Fuzzy Hash: 848e7b2b3d1d7438aceb18ee9ce77d60f8a3148b9db338e3d364b5add5ce48b1
Instruction Fuzzy Hash: B3A001746050109B8689DA58D991818B7A2ABC9219728C4ADA819CB25ACF33E9039A44

Function 028ABEB0 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48bbeae5d483e7f69dbd83b356fecc390b48fd1ae9513ff679bada2083ee4eba
Instruction ID: e4c619c9afb5f752771a021846688162b5dac84fe891f48c14b206e40082014c
Opcode Fuzzy Hash: 48bbeae5d483e7f69dbd83b356fecc390b48fd1ae9513ff679bada2083ee4eba
Instruction Fuzzy Hash: D7900231054E0C8B464027A9B50E5657F6D99485557801151B55D416015E5664104599

Function 06D27DA3 Relevance: .0, Instructions: 3COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2958098080.0000000006D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d20000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8fed34765bed8c0daaf369b7dc9886add41eaaca450fa98873b39a6da471ea77
Instruction ID: c8b624da9f790f462b51b71a4d5c24bbc282ddad1e60c849aa7cc5cadd5ef09d
Opcode Fuzzy Hash: 8fed34765bed8c0daaf369b7dc9886add41eaaca450fa98873b39a6da471ea77
Instruction Fuzzy Hash: E6A0022250510642D714D704CC53394A214DB04B04F5903205440C2283D719963DA2D6

Non-executed Functions

Function 00F14BF8 Relevance: 13.1, Strings: 10, Instructions: 629COMMON

Download Yara Rule

Strings

$|, xrefs: 00F1538E
~, xrefs: 00F14F01
~, xrefs: 00F14FF4
~, xrefs: 00F14F34
~, xrefs: 00F15041
$|, xrefs: 00F151C9
~, xrefs: 00F14E73
~, xrefs: 00F14CE3
$|, xrefs: 00F14E57
~, xrefs: 00F14ED3

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: $|$$|$$|$~$~$~$~$~$~$~
API String ID: 0-1683337474
Opcode ID: fc2e10833f0f5844453e4a687e82710291d150ddcb0699b15a78568ea003dfc5
Instruction ID: 217f61bc1e7899e1cd653da12651a0770fb9566ae3deb1cf2d1cdb36fd68dae6
Opcode Fuzzy Hash: fc2e10833f0f5844453e4a687e82710291d150ddcb0699b15a78568ea003dfc5
Instruction Fuzzy Hash: 75425831A00745CFDB25CF65C948AAAB7F2BFC8715F148469E016CB6A0CB75EC81EB50

Function 00F1B050 Relevance: 3.0, Strings: 2, Instructions: 479COMMON

Download Yara Rule

Strings

~, xrefs: 00F1B0CD
~, xrefs: 00F1B107

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: ~$~
API String ID: 0-3661683218
Opcode ID: cfa194de0f478da300a06a56759fba6641461d1df9e41a931ed19596bf6ccfc8
Instruction ID: bb8d701a53ef45ad30ef7dd0bbe8e8ce99b7da3feec00433845aeb23b7ce874b
Opcode Fuzzy Hash: cfa194de0f478da300a06a56759fba6641461d1df9e41a931ed19596bf6ccfc8
Instruction Fuzzy Hash: 75222730A00219DFDB15DF65C894BADBBB2BF89310F1480A9E809AB3A5DB31DD85DF51

Function 028A59A8 Relevance: 2.7, Strings: 2, Instructions: 238COMMON

Download Yara Rule

Strings

Lv>], xrefs: 028A59C7
Lv>], xrefs: 028A59E7

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: Lv>]$Lv>]
API String ID: 0-490534171
Opcode ID: d1e4a6aab09409d22235332dd103e01cd9516d095b46c4197db809563f77bf9c
Instruction ID: 53eda9402af200006473e1dc4213e3a18ae54aa675d83e846b62e2e4c4a019b7
Opcode Fuzzy Hash: d1e4a6aab09409d22235332dd103e01cd9516d095b46c4197db809563f77bf9c
Instruction Fuzzy Hash: E99162B8E00209DFEF10CFA9C99579DBBF2AF48714F548129D409E7294EB789886CF41

Function 00F140E0 Relevance: 1.7, Strings: 1, Instructions: 439COMMON

Download Yara Rule

Strings

%, xrefs: 00F144C9

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: %
API String ID: 0-2567322570
Opcode ID: 309d97b5311672e8d8367160ac5c3f6b07802add1dad34990693cbf7a654bfc9
Instruction ID: 2fc955c6511858e3380ee4f5630980559453a21cb8789bdbe583ee3def768058
Opcode Fuzzy Hash: 309d97b5311672e8d8367160ac5c3f6b07802add1dad34990693cbf7a654bfc9
Instruction Fuzzy Hash: 51027B70A00209CFDB15DFA9C9546AEBBB6FFC8310F108529E415AB399DB35EC85DB90

Function 028AA878 Relevance: 1.0, Instructions: 1021COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2946176250.00000000028A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 028A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_28a0000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1441931e12f0bdf4dc33759bb91201dadcefcbf0f42b2ece90f6bff9ec821970
Instruction ID: b63b403a4410a6cb0c430eca3e8f4c6e74224deb415f0867f0727a815b54ce69
Opcode Fuzzy Hash: 1441931e12f0bdf4dc33759bb91201dadcefcbf0f42b2ece90f6bff9ec821970
Instruction Fuzzy Hash: 24825A787002058FDB18DF69C99476EBBE2FF94304F108568E14ACB3A9DF759C4A8B51

Function 00F12AA8 Relevance: .4, Instructions: 401COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 453494c648c0b2d145529f61355a919a7d4837f6e00fe97f2cefa32809ec47e1
Instruction ID: c40dc4a767704d45b4fa1b8bcdcb50124b95fb34a69d6bcdae9b682b30ce7b29
Opcode Fuzzy Hash: 453494c648c0b2d145529f61355a919a7d4837f6e00fe97f2cefa32809ec47e1
Instruction Fuzzy Hash: 80F16175B00209CFDB48DFA8D854AADBBB2FF88310F108569E406AB365DB35DC96DB50

Function 00C11F22 Relevance: .2, Instructions: 159COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80d9f84411f72775acc82f1416db63dfc12965702529096e27e29b77f5bcb6e7
Instruction ID: caa88dcf57977b2568e55db2fa893535c9165de1f12255321bd227a4b992a956
Opcode Fuzzy Hash: 80d9f84411f72775acc82f1416db63dfc12965702529096e27e29b77f5bcb6e7
Instruction Fuzzy Hash: 28516C38A00104DFDB44EB95D884BEE77B3FB8A314F28C165D60567298CB756DD2DB90

Function 00C11F30 Relevance: .2, Instructions: 154COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2945190928.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8be7e439534f3cf3972bebf5dc0645c23094f1d40678a212b82f814d35e3c1c9
Instruction ID: a951bf34c5723fc0368f3c8310f6be46409251c491fb93920e25f6de2149aa13
Opcode Fuzzy Hash: 8be7e439534f3cf3972bebf5dc0645c23094f1d40678a212b82f814d35e3c1c9
Instruction Fuzzy Hash: 27516A38A00104CFDB44EB95D884BEE77B3FB8A314F28C165D60567298CB766DD2EB90

Function 00F185B8 Relevance: 7.7, Strings: 6, Instructions: 169COMMON

Download Yara Rule

Strings

~, xrefs: 00F185D7
$|, xrefs: 00F186FC
$|, xrefs: 00F1874E
~, xrefs: 00F1872B
~, xrefs: 00F1865A
~, xrefs: 00F18644

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: $|$$|$~$~$~$~
API String ID: 0-3234656849
Opcode ID: 299b404259ac6e4c63c6e6e5e7d82651c4bb0cddbe4166c67f56375f965e2e71
Instruction ID: 83145e37b8df008cdcc2b02bd2996f15d4705b6168966af3ff0b1597fcb028df
Opcode Fuzzy Hash: 299b404259ac6e4c63c6e6e5e7d82651c4bb0cddbe4166c67f56375f965e2e71
Instruction Fuzzy Hash: 65518E31B002468FC715DB69CA50BAABBE2BFC4390F2445A9D506DB2A5EF30DCC2D790

Function 00F105A0 Relevance: 5.3, Strings: 4, Instructions: 296COMMON

Download Yara Rule

Strings

X=, xrefs: 00F10713
X=, xrefs: 00F10723
X=, xrefs: 00F106F3
X=, xrefs: 00F106E3

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: X=$X=$X=$X=
API String ID: 0-70264736
Opcode ID: 28032bc2862e967b1949586d7ac241e1cb6d702b1e521b60b9d942d89eb2a441
Instruction ID: 46afd9fce320bbe394ebdbf541cd8040203bb135ea311d51eebb3bebdd8cfc81
Opcode Fuzzy Hash: 28032bc2862e967b1949586d7ac241e1cb6d702b1e521b60b9d942d89eb2a441
Instruction Fuzzy Hash: 73B18D717007458FE7208F3AC9547AAB7E6AF84310B54492AD486CB3A5DFB0EDC5EB60

Function 00F18C50 Relevance: 5.3, Strings: 4, Instructions: 256COMMON

Download Yara Rule

Strings

~, xrefs: 00F18ED1
~, xrefs: 00F18EF6
~, xrefs: 00F18E25
~, xrefs: 00F18DF8

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: ~$~$~$~
API String ID: 0-917918857
Opcode ID: c5aae4a8336a8969913b6b4177be76b261175499dced328541d5813804339ba9
Instruction ID: 448ba6edf4c295121be991dc471ea1bda197ae4a2a114e04ef8d38554747d0d1
Opcode Fuzzy Hash: c5aae4a8336a8969913b6b4177be76b261175499dced328541d5813804339ba9
Instruction Fuzzy Hash: DD913731A04380CFC3228B75D940596BFF2EF85354B1845AED4868B7A2CB35EC8AD791

Function 00F18808 Relevance: 5.1, Strings: 4, Instructions: 123COMMON

Download Yara Rule

Strings

~, xrefs: 00F1895F
~, xrefs: 00F188C0
~, xrefs: 00F18867
~, xrefs: 00F1883A

Memory Dump Source

Source File: 00000000.00000002.2945857431.0000000000F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f10000_jAjWw92QKR.jbxd

Similarity

API ID:
String ID: ~$~$~$~
API String ID: 0-917918857
Opcode ID: 72e4a06635ad7e97338692eee6ae1dd997b674cf1da5fc73a382fca9f04769d8
Instruction ID: cebd2225c90228aca037edd56ca170d51fc27ef6dee5240e4eca124e210bb1a6
Opcode Fuzzy Hash: 72e4a06635ad7e97338692eee6ae1dd997b674cf1da5fc73a382fca9f04769d8
Instruction Fuzzy Hash: CA41CE35904B408FD730CA26C6847B277E1BF543A4F94496ED487836A1CB74F8CAEB62

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report jAjWw92QKR.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: AsyncRAT

Yara Signatures

Initial Sample

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Network Behavior

Suricata IDS Alerts

Windows Analysis Report
jAjWw92QKR.exe